Analysis Overview
SHA256
64cc82160edccda2bfd82d92b429ea0f98dcda9659a5c757b2748119847f5532
Threat Level: Known bad
The file a.exe was found to be: Known bad.
Malicious Activity Summary
Phorphiex Worm
Windows security bypass
Modifies Installed Components in the registry
Modifies extensions of user files
Executes dropped EXE
Loads dropped DLL
Windows security modification
Reads user/profile data of web browsers
Drops desktop.ini file(s)
Enumerates connected drives
Adds Run key to start application
Modifies service
Drops file in Program Files directory
Suspicious use of SendNotifyMessage
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Modifies registry class
Suspicious behavior: RenamesItself
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of WriteProcessMemory
MITRE ATT&CK
Enterprise Matrix V6
Analysis: static1
Detonation Overview
Reported
2020-11-05 20:58
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2020-11-05 20:58
Reported
2020-11-05 22:28
Platform
win7v20201028
Max time kernel
150s
Max time network
124s
Command Line
Signatures
Phorphiex Worm
Windows security bypass
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\35045.exe | N/A |
| N/A | N/A | C:\120162634617678\winsvcs.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
Modifies Installed Components in the registry
Modifies extensions of user files
| Description | Indicator | Process | Target |
| File renamed | C:\Users\Admin\Pictures\SetHide.png => C:\Users\Admin\Pictures\SetHide.png.ReadMe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File renamed | C:\Users\Admin\Pictures\SubmitConvert.tif => C:\Users\Admin\Pictures\SubmitConvert.tif.ReadMe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File renamed | C:\Users\Admin\Pictures\ConvertGroup.png => C:\Users\Admin\Pictures\ConvertGroup.png.ReadMe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File renamed | C:\Users\Admin\Pictures\DenyImport.raw => C:\Users\Admin\Pictures\DenyImport.raw.ReadMe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Pictures\FindStep.tiff | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File renamed | C:\Users\Admin\Pictures\FindStep.tiff => C:\Users\Admin\Pictures\FindStep.tiff.ReadMe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File renamed | C:\Users\Admin\Pictures\PushReset.crw => C:\Users\Admin\Pictures\PushReset.crw.ReadMe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File renamed | C:\Users\Admin\Pictures\RequestCompress.raw => C:\Users\Admin\Pictures\RequestCompress.raw.ReadMe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\a.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\35045.exe | N/A |
| N/A | N/A | C:\120162634617678\winsvcs.exe | N/A |
| N/A | N/A | C:\120162634617678\winsvcs.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
Reads user/profile data of web browsers
Windows security modification
| Description | Indicator | Process | Target |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\FirewallDisableNotify = "1" | C:\120162634617678\winsvcs.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\AntiVirusOverride = "1" | C:\120162634617678\winsvcs.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1" | C:\120162634617678\winsvcs.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\FirewallOverride = "1" | C:\120162634617678\winsvcs.exe | N/A |
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\120162634617678\\winsvcs.exe" | C:\Users\Admin\AppData\Local\Temp\35045.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\120162634617678\\winsvcs.exe" | C:\Users\Admin\AppData\Local\Temp\35045.exe | N/A |
Drops desktop.ini file(s)
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files (x86)\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Saved Games\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Searches\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Pictures\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Recorded TV\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Recorded TV\Sample Media\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Links\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Music\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\AT22T7OH\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Documents\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Videos\Sample Videos\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Favorites\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Pictures\Sample Pictures\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Favorites\Links\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Videos\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | \??\M:\$RECYCLE.BIN\S-1-5-21-3825035466-2522850611-591511364-1000\desktop.ini | C:\Windows\explorer.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Desktop\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Music\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Videos\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Desktop\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Downloads\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\8DDKLDOL\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\F6O5NPVK\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Documents\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Favorites\Links for United States\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Pictures\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\RKGIF8TT\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Admin\Contacts\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Libraries\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Users\Public\Music\Sample Music\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
Enumerates connected drives
Modifies service
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs | C:\Windows\explorer.exe | N/A |
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\libGLESv2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Csi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02268_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\CERTINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR46B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libimage_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\SpeechEngines\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ja.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00798_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBSBR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Microsoft Office\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OFFOWC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\visualization\libglspectrum_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR34F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0233992.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECREC.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OARTCONV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREET11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libflac_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01141_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sa.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\21.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEREP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_mr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292286.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297727.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00555_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POST.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-spi-actions.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107328.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14983_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EntityDataHandler.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\CURRENCY.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Journal\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\DirectDB.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ClassicPhotoAlbum.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-common.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\d3d11\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21323_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\menu_arrow.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\utilityfunctions.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEWSS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\LAYERS.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00396_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MSASCui.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Yellowknife | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01148_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02263_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME37.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\TITLE.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticattribute.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\browser\VisualElements\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101863.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18215_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Curacao | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\ColleagueImport.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCD98SP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\PROOF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\pdmproxy100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WORDREP.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Defender\MpAsDesc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Norfolk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\platform.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241041.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01191_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\jawt.lib | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199549.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Copenhagen | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099193.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0291984.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115836.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR48B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\EST5 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\NPSWF32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UNT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RSSITEMS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OnLineIdle.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceDaYi.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console_1.0.300.v20131113-1212.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\en-US\ImagingDevices.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14997_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\ACTIVITS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SOCIALCONNECTOR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\manifest.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\MST | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\PIXEL.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msado25.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01297_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7wre_en.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBHD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zaporozhye | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_sun.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR41F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Cairo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185786.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libtcp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\jsse.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341551.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EAWFINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\javafx.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\clock.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14582_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLJRNL.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MENU.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBHED98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBARBLL.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pago_Pago | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Ulaanbaatar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\en-US\jnwmon.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\WindowsPowerShell\Configuration\Registration\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tripoli | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-cli.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\La_Rioja | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Onix32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01245_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\VIBE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENVHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1STAR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0324694.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\OliveGreen.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-ui.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_alignleft.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861261279.profile.gz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\localizedStrings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107502.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0227419.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00530_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\SOLVER32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Swift_Current | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18246_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21503_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\VelvetRose.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\currency.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmplayer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Yakutat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can.fca | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\DLGSETP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_pressed.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Samara | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\32.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeUpdater.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_EN.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-startup.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup-impl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msador15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\vocaroo.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBE7INTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105380.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+2 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153398.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Khartoum | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javaws.policy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows NT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Canary | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libx265_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR29F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDREQL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewFrame.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBHOME.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\3.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee100.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_FR.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00468_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsMacroTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GIFT98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdaterInstallMgr.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\RICEPAPR.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Whitehorse | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sq\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\updater.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195788.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ContemporaryPhotoAlbum.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multitabs.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\am\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\browse_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\SY______.PFB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\BillingStatement.xltx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\add_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\jvm.lib | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Brunei | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACEDAO.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-loaders.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\nn\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02413_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14578_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATALOG.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\master_preferences | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-spi-quicksearch.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGATNGET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-nodes.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jfxmedia.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\XOCR3.PSP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.bfc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107492.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00050_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0298653.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BANNER.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\logger\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadco.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR6B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CONTACTINFOBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt_1.1.1.v20140903-0821.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\VSTARemotingServer.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME44.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadcor.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONLNTCOMLIB.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL077.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\SAVE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\management-agent.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_zh_CN.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01734_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\+Connect to New Data Source.odc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\sRGB.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\VBAJET32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\INDUST.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OutDomain.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS0009.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-util.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tongatapu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\SPRING.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153302.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\drive.crx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL110.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ast.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\cmm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\cpu.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_email.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384862.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14791_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jawt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\6.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293234.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\messageboxalert.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-api-visual.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGZIP.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107742.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107148.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01332U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\wxpr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSClientManifest.man | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTBOX.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\gu.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_es.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\ext\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Tulip.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151067.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME28.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR7B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB3B.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ta\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\status.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libfingerprinter_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBORDER.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Copenhagen | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\info.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Nicosia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR30F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00223_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.InfoPath.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Gaza | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\PhotoAcq.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\BG_ADOBE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.commands_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_th.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382965.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadcer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\1 Top.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)greenStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_TW.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\JavaAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\en-US\JNTFiltr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107468.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OutSyncPC.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hy.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\PAPYRUS.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185670.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\msproof7.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\47.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-io-ui.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Helsinki | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Discussion14.gta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AD98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.cpl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Cancun | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\uninstall.log | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRdIF.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterApplicationDescriptors.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\RELEASE-NOTES.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msadomd.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR20F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\SDK\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows NT\Accessories\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152568.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21304_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIconsMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\setup.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB1B.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Athens | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libqsv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\slideShow.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\13.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Manila | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Detroit | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\lv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\TALK21.COM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\corner.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Luis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpAsDesc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDownArrow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FS3BOX.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-threaddump.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-remote.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Goose_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEWSTR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\CANYON.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00433_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-windows.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105398.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Black Tie.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR10F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Cuiaba | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART4.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_choosecolor.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOHEVI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONBttnWD.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01040_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00918_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RECL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.EPS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\Ole DB\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Havana | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\DumontDUrville | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Rarotonga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvSOFT.x3d | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285698.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-windows.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\masterix.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\release | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\ResizeTrace.cab | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libskiptags_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEEXCL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10290_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fr.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Colombo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\psfontj2d.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861258748.profile.gz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_ok.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Vienna | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086428.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME46.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\DRUMROLL.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessData.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107188.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00640_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115864.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\rtstreamsink.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Guam | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\daisies.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107316.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341654.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\cs.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02313_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECRECS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN108.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\fontmanager.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Jamaica | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02028_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ro.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLPERF.INI | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR9B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MIMEDIR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7ge.kic | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\HEADINGBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0195812.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.concurrent_1.1.0.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libaom_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Defender\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Memo.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1XTOR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Music.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\TAG.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102002.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10289_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\SHOVEL.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\PDXFile_8.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiling.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\Accessories\WordpadFilter.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\jvmti.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\softokn3.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SendMail.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Cape_Verde | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Eucla | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03453_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01749_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149887.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EXSEC32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guyana | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\javafxpackager.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs-nio2.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Chisinau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18216_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\youtube.crx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\LATIN1.SHP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21370_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Temp\GUMCEA4.tmp\GoogleUpdateSetup.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199283.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADVZIP.DIC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\apt.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msador15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR32F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Adjacency.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\currency.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18242_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Kiev | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0179963.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\TOOT.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Reference Assemblies\Microsoft\Framework\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\timeZones.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\slideShow.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0221903.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\skins\default.vlt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00828_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21310_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-13 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_de_DE.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\HEADING.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\access-bridge-64.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Media Player\Visualizations\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)greenStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00462_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10264_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSRuntimeUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABOFF.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-11 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00505_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository_1.2.100.v20131209-2144.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-windows.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-favorites.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195428.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02426_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115839.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\STARTUP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tallinn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\JdbcOdbc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107300.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FRENCH.LNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL089.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thule | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EMSMDB32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Denver | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nb.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\features\[email protected] | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\18.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\mip.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Scoresbysund | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL105.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGDOTS.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLOGO.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\JavaAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\msvcp140.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\RE00006_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115866.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099201.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00512_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0195534.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Winnipeg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215070.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Juan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libsftp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\MOFL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdasql.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\axvlc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198494.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01161_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\SHOT.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sitka | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_olv.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0177806.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_OliveGreen.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)alertIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\msitss55.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178459.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKUPD.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic\DEFAULT.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.Adapter.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR8F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\IA32.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105238.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-text.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadcor.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\DiagnosticsTap.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\NL.ROGERS.COM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\MSBuild\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libsid_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00625_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Brussels | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\MSOERES.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185790.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB7.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\oledbvbs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02270_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_GreenTea.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\accessibility.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Godthab | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port_of_Spain | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR39F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21303_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SOA.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\verify.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\mraut.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ms.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_pl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Midway | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105412.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386764.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\3.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\features\[email protected] | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\RICEPAPR.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\TRANSMRR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\messageboxerror.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PPSLAX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Reunion | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105378.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Installed_schemas14.xss | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\BLENDS.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Dotted_Line.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241773.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLowMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR5B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR26F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Riga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0315447.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONGuide.onepkg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\US_export_policy.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ViewerPS.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02437_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR38F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21330_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\IPOLKINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+6 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01172_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02793_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02187_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21326_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-8 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR17F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\IMAGE.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-ui.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msado27.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NAME.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL010.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SSGEN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Services\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_fr.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SCNPST32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Eurosti.TTF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\updater.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0314068.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\README.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msadox.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05665_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Internet Explorer\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21433_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.KR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0090386.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ckb\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ps\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR22F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN054.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\CIEXYZ.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sampler.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\LICENSE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\error_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00563_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB2B.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297229.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\prism-d3d.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Resolute | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00941_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00330_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePage.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sr-spl.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\features\[email protected] | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Equity.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsVersion1Warning.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATWIZ.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\VSTAClientPkgUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304853.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Category.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090089.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153095.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212685.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Charitable Contributions.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MST | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\add_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00693_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novosibirsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ky\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Form.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\back.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\psfont.properties.ja | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\core.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10266_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OLKIRM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ta.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor_1.0.300.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Irkutsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)redStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_super.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OWSCLT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02267_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02228_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0186348.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\WidescreenPresentation.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH00780U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Martinique | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiling.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ACE.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106020.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0289430.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\libEGL.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Acrofx32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14754_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21325_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\ORG97.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\fxplugins.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.HLP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01394_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\dependentlibs.list | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MOR6INT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTIT.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN026.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_uk.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\warning.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382959.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285820.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Monterrey | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterRegular.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Rome | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\icucnv36.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\zip.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\3.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\PersonalContact.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\library.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)alertIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00560_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Projects.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\br\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\wmpnetwk.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mousedown.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\SATIN.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107748.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadcf.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\LoginForm.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287417.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR44F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Issues.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\redStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\javafx.policy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0252629.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00737_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01298_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLBAR.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_increaseindent.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Kerguelen | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\update-settings.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03143I.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBOXES.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Managua | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\skchui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10255_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14711_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\IPML.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\COIN.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Reference Assemblies\Microsoft\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\corner.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0175428.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15061_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10307_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONTACTL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Priority.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+3 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Boise | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Knox | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\profilerinterface.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Antarctica\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00345_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149627.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\kcms.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR43F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18205_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\18.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\wabmig.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\glib-lite.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\mpvis.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Kuching | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\nl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\InkDiv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152688.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BORDERBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Real.mpp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382955.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR9B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\STOPICON.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN095.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Tabs.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Taipei | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN011.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Qatar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECURL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\Xusage.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187861.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00483_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImagesMask16x16.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Msgbox.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\my\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Foundry.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02066_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZDAT12.ACCDU | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7es.kic | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\35.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Hermosillo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-search_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-core.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\daisies.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdaps.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\IRIS.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382950.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME18.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Irkutsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14654_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RESENDS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\charsets.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.HOL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\WSS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099180.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePage.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIconsMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00792_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PNCTUATE.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SEQCHK10.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\22.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_pt_BR.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Horizon.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\SettingsInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\an\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\WMM2CLIP.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\management\jmxremote.password.template | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15060_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\wmlaunch.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\va.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\HLS.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01064_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RECS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\15.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.SG.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZCARD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Kosrae | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\VERSION.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\anevia_xml.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00768_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WHIRL1.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Aspect.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293236.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OISINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-spi-actions.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\DESIGNER\MSADDNDR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02388_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0235241.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.contexts_1.3.100.v20140407-1019.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152608.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341554.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\msadc\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.identity_3.4.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmpenc.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_same_reviewers.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0149018.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Foundry.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Assets.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\jaccess.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jli.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\plugin.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME41.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NL7Lexicons0011.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Portal\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02293_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_top.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\config.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Routing.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285750.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\CollectSignatures_Sign.xsn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL011.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382963.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00231_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21318_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Galapagos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\application.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATALOG.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe.config | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187829.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183328.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTVIEW.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jfxwebkit.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\javafx-doclet.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\libvlc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02054_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10254_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\kn.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0214098.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Blanc-Sablon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ro.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382958.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\GRIP.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\GRAY.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18185_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\RSWOP.ICM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh88 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14768_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Uninstall Information\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-charts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\blank.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107282.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\en-US\PDIALOG.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0217698.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OMSINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\8.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\NBMapTIP.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107514.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME30.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sk.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\WMPMediaSharing.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\22.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Novosibirsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Samara | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292248.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0302953.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\UrbanFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\jce.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01661_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0336075.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHD98SP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Executive.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15185_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search5.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\PublicFunctions.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows NT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\UCT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtospdif_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00390_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHD98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\tzmappings | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Mazatlan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196110.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Teal.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado20.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\de.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-windows.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\ConnectionManager.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\APPLAUSE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN027.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\boot_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Mexico_City | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Beulah | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Angles.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\hprof-16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Indian\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityMergeFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Budapest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\MTEXTRA.TTF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241019.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Catamarca | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153089.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0282932.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Median.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OTKLOADR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART7.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Davis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\7.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18192_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Skins\Revert.wmz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\servertool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql_2.0.100.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\2 Right.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Slipstream.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21312_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cancun | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00394_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01243_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NL7Models0011.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB4.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PICTPH.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\SecretST.TTF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rightnav.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpSvc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297185.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OUTEX2.ECF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Accessibility.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\msaccess.exe.manifest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Recife | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Pitcairn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Saipan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateSetup.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Mozilla Maintenance Service\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_top.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicTSFrame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-actions.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FSTOCK.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL081.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\management.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\removed-files | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18181_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10336_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-compat.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Portal\PortalConnectCore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mazatlan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\win32_MoveDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-vertical.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195254.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\meta\reader\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR10F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EXLIRMV.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\form_edit.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-favorites.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\ir.idl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_floating.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\SignedManagedObjects.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Rothera | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt55.ths | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00546_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152894.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02522_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\IA2Marshal.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libvcd_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODEXL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02091_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\SUBMIT.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341653.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH00601G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zG.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\16-on-black.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeXMP.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.server_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Kabul | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\add_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_pt-BR.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02750G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02051_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdaprst.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACETXT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QRYINT32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\glass_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\17.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Paper.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Center | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185776.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239975.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234131.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\DELETE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+4 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212601.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1036\MSO.ACL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0315612.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21427_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Groove Starter Template.xsn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107718.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14832_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\PublicFunctions.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_it.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS000C.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\46.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveResume.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Porto_Velho | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Flyout_Thumbnail_Shadow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DOCS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignright.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLVBS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-api.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHLTS.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-print.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-compat_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows NT\Accessories\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03795_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BDRTKFUL.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\day-of-week-16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_elf.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\koreus.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200273.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\WWLIB.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\45.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\AUTHOR.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\RIPPLE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\42.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105376.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\YEAR.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ko\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msdarem.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18184_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART9.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\id\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_output\libmmdevice_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanReport.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pidgenx.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00166_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Manuscript.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-hot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Default.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_partstyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Tirane | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msdaremr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Danmarkshavn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\SERVWRAP.ASP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\js\ui.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02400_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ADD.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Casey | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macHandle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Pyongyang | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02740U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02742U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7tk.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kathmandu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Perspective.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18210_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VS_ComponentSigningIntermediate.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\sawindbg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02233_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+10 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-queries.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\penchs.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoCanary.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libreal_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_drop_shadow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sw.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\JdbcOdbc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB8.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEB11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pt.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jp2launcher.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Bougainville | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105294.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Anadyr | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-text.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Aspect.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Origin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309567.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\FLASH.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-hot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\VISSHE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\it.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\gmail.crx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-favorites.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONELEV.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\SPACER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\slideShow.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security_1.2.0.v20130424-1801.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\MSBuild\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182902.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCVDT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\12.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\create_form.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198113.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME50.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\localizedStrings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)redStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Black Tie.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Austin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fi.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\Microsoft.Ink.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187881.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0318810.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02448_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSRETRO.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Clarity.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR00.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Sitka | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Darwin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MsMpCom.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\EScript.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\ieproxy.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188679.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Noumea | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\MDIParent.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDRESP.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.security_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\accessibility.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Dawson_Creek | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\cpu.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)notConnectedStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00095_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Nairobi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-awt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Waitcursor.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00233_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152558.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ahclient.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\java.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Media Player\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\ielowutil.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200189.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00476_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBARBLL.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Thimphu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Fiji | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02386_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\History.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libau_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-desk.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\MSMAPI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\EXPEDITN.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKDEC.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PRTF9.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\AUTHZAX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\eu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\xmlrw.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187835.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR45B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OMSXP32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\Ole DB\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Media Player\Icons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.Office.Tools.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\en-US\Sidebar.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\win32\jni_md.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Puerto_Rico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00046_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\5.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Vincennes | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEODBCI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hu.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00726_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OSPP.VBS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\DiagnosticsTap.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\gui\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Journal\Templates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00333_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0215086.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14769_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183198.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\iedvtool.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186346.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryNewsletter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_nv12_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02753U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0332364.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Damascus | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107426.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14538_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Palau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libxa_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301044.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUCRES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\Presentation Designs\Maple.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Blog.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_de.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0205462.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIcons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\DataSet.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\activity16v.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\Client.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_120.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\ct.sym | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB5B.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\nssckbi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.el_2.2.0.v201303151357.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\tesselate.x3d | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\FDFFile_8.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Metro.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ADRESPEL.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\jsdebuggeride.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\ffjcext.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\validation.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188511.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEWBY.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\20.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\descript.ion | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR15F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLFLTR.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382952.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115835.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\SPLASH.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_bkg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-1 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpCommu.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Essential.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART12.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado21.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\mux\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101867.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpCmdRun.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00257_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SlateBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs-nio2.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImages16x16.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\cmm\GRAY.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyReport.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jabswitch.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bg\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_lt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sk.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02417U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00286_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\wabmig.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Godthab | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183172.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00810_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\es\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Warsaw | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00642_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\wmpenc.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl-hot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304371.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\th.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ug\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODDBS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\meta-index | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR9F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIcon.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\WHOOSH.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WSIDBR98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\Accessories\en-US\wordpad.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QP.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-8 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00919_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152570.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00152_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285444.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Juan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORTL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15274_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\uninstall\shortcuts_log.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212957.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14515_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14794_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA000A.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME38.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ALERT.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21297_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\pdm.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\classes.jsa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaBrightItalic.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15171_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0197983.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\t2k.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msado21.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msado28.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\ffjcext.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\flavormap.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\slideshow_glass_frame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14514_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\ITIRCL55.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\gl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00042_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Nairobi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belize | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Paris | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Berlin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CHECKER.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Tegucigalpa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMARQ.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313965.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\PNG32.FLT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_bottom.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\notConnectedStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\jfr\profile.jfc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ACTIP10.HLP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-dock.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cuiaba | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-io.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libtimecode_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIconsMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Stationery\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-api.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\AdobeID.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\EEINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadomd28.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\mojo_core.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Casablanca | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCARD11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Apothecary.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_off.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\20.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\include\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Office 2.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01805_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SplashScreen.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse_1.1.200.v20140414-0825.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215718.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Thule | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.RSD | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msjro.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdatl3.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MST7MDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\policytool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105348.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSQRY32.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_justify.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\rtstreamsource.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Executive.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Perth | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\ImagingDevices.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\glass.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeAUM_rootCert.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\GreenBubbles.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRLEX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\REFEDIT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00629_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-filesystems.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Oriel.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PPTIRM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Ojinaga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\skins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0186002.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME35.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-annotations-common.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Wallis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107350.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR34B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\1033\Synchronization.rll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Volgograd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee100.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382968.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00241_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ADD.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\11.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\et\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Boa_Vista | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02453_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\INDOMAIN.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Qyzylorda | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\mix.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvm.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297269.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR6B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.VN.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\EPSIMP32.FLT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185818.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\excelcnvpxy.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0158071.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginReport.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\eo.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guatemala | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Chita | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\PDFFile_8.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp_3.6.300.v20140407-1855.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\mobile.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\en-US\WinMail.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187839.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR18F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jmc.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099170.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00531_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBOXES.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgePackages.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\libxslt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR14F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WORDREP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\ij | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server-15.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\en-US\WinMail.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\86.0.4240.111.manifest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tokyo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\main.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\pdf.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDREST.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\MSInfo\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libpng_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\init.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01164_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.PL.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105234.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105496.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Catamarca | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\en-US\sbdrop.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01474_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02291U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dialog.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\34.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Pipeline.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MsMpLics.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152696.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Gibraltar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jpeg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\unpack.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\CAPSULES.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099145.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATWIZ11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR48F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.TLB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\IETAG.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02390_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SETLANG.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\slideShow.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-impl.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libmicrodns_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\JNWDRV.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\Microsoft.Ink.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01035U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\THOCRAPI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287645.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\NUMERIC.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OISGRAPH.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\management\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Louisville | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\extensions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152722.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BROCHURE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\j2pcsc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Samarkand | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106222.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pa-in.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Nassau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-api.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR3F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\gfserrorfromgroove.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\LoanAmortization.xltx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Panama | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\zh_TW\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\d3d9\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_spellcheck.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jdb.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\mc.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fontconfig.properties.src | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\calendar.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateHelper.msi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Adjacency.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB3A.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\SEAMARBL.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg_orange.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\crashreporter.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInAcrobat.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297725.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00168_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Oriel.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdaprsr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\gfserrortogroove.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\external_extensions.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\gui\libqt_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03011U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14833_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\greenStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\library.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPOlive.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\de\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PROG98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Wordcnvr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Elegant.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg_sml.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\glass.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Seoul | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099159.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0227558.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18187_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\pack200.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\kk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mousedown.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199036.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYVERTBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\37.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152892.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21435_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows NT\Accessories\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bangkok | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Media Player\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\RADIAL.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240291.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18233_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME02.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcecompact35.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\si\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR17F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR45F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR6F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0250504.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05869_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\en-US\OmdProject.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196142.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10299_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15021_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableUpArrow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fr.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\com.jrockit.mc.console.ui.notification_contexts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-1 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\MMSS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyMergeLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UCT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02025_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+9 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Eirunepe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\CsiSoap.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\SPRING.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145895.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01253_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02062U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237759.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Metro.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\kn\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-plaf.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\d3d11\libdirect3d11_filters_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\reflow.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\form_responses.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierCloseButton.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SketchPadTestSchema.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SLERROR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN010.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBOB6.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\gu.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00057_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Maroon.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ext_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_70.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02752U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\3082\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rankin_Inlet | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\da\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.IN.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AssemblyInfoInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw120.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107266.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-CN.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\he.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Rangoon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CNFNOT.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\audiodepthconverter.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\JSByteCodeWin.bin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Data1.cab | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18193_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKDECL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABON.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\To_Do_List.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239935.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSSPC.ECF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\BG_ADOBE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.SqlServerCe.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\java.security | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Ust-Nera | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\eula.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\weblink.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSO.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237225.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0298897.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jerusalem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\indxicon.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\bg_sidebar.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0090070.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\msoe.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yakutsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ja.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Casablanca | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.actionProvider.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239941.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.preferences_3.5.200.v20140224-1527.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\packetizer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0233512.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)grayStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\alertIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montevideo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Filters\odffilt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21320_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.STD | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Library\EUROTOOL.XLAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLMAIL.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\PRODIGY.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-uihandler.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfont.properties.ja | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novokuznetsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_basestyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\pack200.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\zy______.pfm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0233312.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\bundles.info | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\access\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153093.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178639.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0292152.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14530_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\dt_socket.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ko.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Tashkent | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\jsdbgui.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-enumerations.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Sao_Paulo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\he\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Services\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\native2ascii.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\PDFSigQFormalRep.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_gu.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Hardcover.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Services\verisign.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\localizedSettings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\picturePuzzle.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\ACTIVITY.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OMSMMS.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL020.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\LICENSE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\1033\Mso Example Intl Setup File B.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\uninstall\helper.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0158477.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01219_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21390_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115855.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\WMPDMCCore.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME24.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\Client.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR3B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Marquesas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02278_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00633_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.ibm.icu_52.1.0.v201404241930.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.logging_1.1.1.v201101211721.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-appui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WITHCOMP.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8PDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jayapura | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-options_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02127_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_justify.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sr.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\skins\fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152626.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-print.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200521.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0202045.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00735_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\37.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.css_1.7.0.v201011041433.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-visual.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\6.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\wmprph.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pt_BR.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152610.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239611.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14753_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RSSITEML.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\nacl_irt_x86_64.nexe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL083.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\dt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ka\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\newgrounds.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285780.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Origin.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\AUDIOSEARCHLTS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\ACADEMIC.ONE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-api-caching.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0196400.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Tucuman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-util-enumerations.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0293832.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME20.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7en.kic | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBOX.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLINACC.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\METCONV.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0098497.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Managua | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Tehran | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Grid.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OISAPP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00177_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02423_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00308_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLN.XLS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBrowserUpgrade.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OCRVC.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Salta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\JNTFiltr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\EURO\MSOEURO.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21294_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net_1.2.200.v20140124-2013.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-core-kit.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\Mso Example Setup File A.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\minidump-analyzer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107450.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\rmid.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\triangle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Resource.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Vevay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200163.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\El_Aaiun | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\crashreporter.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Internet Explorer\SIGNUP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\jsdbgui.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0150150.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01295_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02214_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Vilnius | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00395_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR31B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MENU98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-compat.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185798.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMIMEE.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\default.jfc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPHandle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Belem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115865.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_On.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105286.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado27.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLAPPT.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Address.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Media Renderer\avtransport.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Earthy.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182888.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Media Renderer\DMR_48.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\main.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152600.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\BCSLaunch.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200289.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02288_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24ImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins_1.1.200.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\SC_Reader.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\schemagen.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02567J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielResume.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101865.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Media Renderer\connectionmanager_dmr.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_nl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188519.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02738U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115840.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MENU.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\41.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSTORES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00726_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01750_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE.MANIFEST | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Defender\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Comments.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Montreal | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Curacao | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\London | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\main_background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182898.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238927.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00238_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Vevay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Mail\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21527_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Omsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VGX\VGX.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18204_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Detroit | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\3.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\BLUECALM.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Currency Rates.iqy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\vlc-48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-awt.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285822.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\DAO\dao360.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02198_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MAIN.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tehran | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-execution.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdater.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187847.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02756U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdfmap.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Khandyga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00159_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL086.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fur.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-dialogs.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_sml.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01160_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02085_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCallbacks.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099152.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14655_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3FR.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BS4BOXES.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-fallback.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\uk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384895.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\NOTEL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoBeta.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fur\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\Office64MUISet.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00343_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\preface.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\THANKS.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02124_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsFormTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LINEACT.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107138.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107090.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Document.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\TEAROFF.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_hu.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-spi-quicksearch.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382938.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02431_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Wordconv.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\uk.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Green Bubbles.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.command_0.10.0.v201209301215.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Tijuana | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\networkinspection.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00345_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR51B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado26.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\codec\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341475.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-snaptracer.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\CrashReports\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00233_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es-419.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Jujuy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Canary | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\CET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\logsession.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\ICE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\macroprogress.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\NOTEBOOK.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGDOTS.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Teal.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\TimeCard.xltx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_sml.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153265.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0213449.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft.NET\RedistList\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net_1.2.200.v20120807-0927.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21314_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FORM98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PULQOT98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Tasks.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_cycle_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\pdm.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_SlateBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\11.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ust-Nera | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\WMPNSSUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\BLUECALM.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0296277.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21316_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\manifest.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\splashscreen.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtobe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\zh_CN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_browser.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdasql.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\Filters\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152898.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Inuvik | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Broken_Hill | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\journal.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)redStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_bottom.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Hand Prints.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400003.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\THOCR.PSP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\Debugger\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libwav_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CSD | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\VERSION.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\1033\Mso Example Intl Setup File A.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_On.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0315580.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01126_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099182.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL102.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guayaquil | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Araguaina | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Glace_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Port-au-Prince | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\cacerts | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielReport.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\WinMail.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\38.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\4.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Mahe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR2F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\VSTAProjectUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\3RDPARTY | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\sunmscapi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\MSB1ESEN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107724.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\BG_ADOBE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\nb.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\psmachine.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14677_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART13.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libmft_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107342.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00656_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\+NewSQLServerConnection.odc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Issue Tracking.gta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\localizedStrings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\wabimp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libts_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285796.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\zh-tw.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21324_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\REVERSE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Bissau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\tools.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Juneau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_top.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLIST.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.c | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Country.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\info.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Saipan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Ceuta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Easter | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\cpu.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Identity-H | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00559_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zFM.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\bdcmetadata.xsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR29F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations_2.4.0.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-services.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Africa\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Acrobat\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSStr32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\localedata.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\calendars.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185834.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ml.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msader15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\resources.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ru\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086420.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285462.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_48.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pt-br.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01740_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBrowserUpgrade.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MAPIPH.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Auckland | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152628.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01292_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Concourse.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\FAXEXT.ECF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZFORM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Menominee | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\SalesReport.xltx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lv.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jinfo.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\ktab.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Apothecary.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_100_percent.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Boa_Vista | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OFFOWCI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_sv.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Anchorage | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCOUPON.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SAEXT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\WMPDMC.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\VC\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base_4.0.200.v20141007-2301.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187883.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR24F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Malta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14513_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGNAVBAR.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaBrightRegular.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_flyout.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR41F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Media Player\Media Renderer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-sendopts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\browser\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Broken_Hill | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10265_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-tabcontrol.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ERROR.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Singapore | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.TH.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ne.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2ssv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Nauru | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Srednekolymsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\msadc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02439_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01179J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_SlateBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPQUOT.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BUSINESS.ONE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Internet Explorer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Los_Angeles | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313896.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_disable.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\management\snmp.acl.template | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\javaws.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-attach.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sampler.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\CST6CDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\en-US\wab32res.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_ES.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099181.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REMOTEL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00013_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\Accessories\wordpad.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Visualizer.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspatialaudio_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sendopts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15072_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01255G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\flyout.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0318804.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00538_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02356_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02752G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299125.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\F12Tools.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\PIXEL.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ACWIZRC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME31.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR5F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPreviewTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jp2ssv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Response.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\com-sun-tools-visualvm-modules-startup.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLSTL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Abstractions.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\MST7MDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Monticello | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_Undocked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00116_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR27F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_left.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\tnameserv.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\SLATE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XLSLICER.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL026.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152704.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00416_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24Images.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfigInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Thimphu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01358_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02371_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jpeg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\EST | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00364_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0286034.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21298_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLN.PPT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\extcheck.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\IntroducingPowerPoint2010.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0234376.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BLANK.ONE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_winxp.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\tzmappings | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Media Renderer\DMR_120.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SaveAsRTF.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099160.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00231_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\Triedit\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Lagos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Gaza | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\micaut.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Solstice.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jdwp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105246.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\af.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\control\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSAIN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableDownArrow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\SessionOwner.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\clock.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Thunder_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\zx______.pfm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\PortalConnect.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107482.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028191328.pma | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Lagos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multitabs.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\javacpl.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\FM20.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151061.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18219_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_alignright.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\hprof.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216112.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\iedvtool.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00452_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02045_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Tools.Applications.Project.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\PhotoAcq.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Fakaofo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libg711_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\23.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00494_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10219_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Merida | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Foundry.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Newsprint.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Jujuy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Luxembourg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14757_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RES98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FPERSON.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL093.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR33F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\tnameserv.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\BLUEPRNT.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHPHN.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianMergeLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\currency.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssLogo.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107512.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper_1.0.400.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\EURO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00736_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14528_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\APPTL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyResume.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\DESIGNER\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OSPP.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Abstractions.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0177257.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00014_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL103.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-progress.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Microsoft Office\Office14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Stockholm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21518_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.BusinessData.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IPDESIGN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OWSSUPP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_HK.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Kamchatka | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libmod_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Temp\GUMCEA4.tmp\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Vladivostok | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MP00646_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ProjectStatusReport.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\highDpiImageSwap.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152560.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\CLVWINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GB.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsColorChart.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh88 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\jnwppr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\RSSFeeds.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Efate | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bg.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01745_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.InfoPath.FormControl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152702.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.security | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Chagos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Gradient.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00703L.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSClient.Msg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECURS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\9.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Black Tie.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.JP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\Timeline.cpu.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Events.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\calendar.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR40F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Manaus | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thunder_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\fxplugins.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301252.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\MENUS.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\cursors.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdasqlr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-api.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroSign.prc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IPIRM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\STINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\MSB1ARFR.ITS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21340_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_fr.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART15.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqloledb.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FORM.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\SystemV\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ALRTINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099156.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187819.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\micaut.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.IDX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107132.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\7.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-explorer.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hu.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Galapagos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107456.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\OFFISUPP.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240811.profile.gz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10253_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_extended.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kosrae | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Davis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEERR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\PersonalMonthlyBudget.xltx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\WMPDMCCore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107496.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\TexturedBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Urumqi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Maceio | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fil.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115843.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\STSUPLD.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginResume.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\SLATE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateCore.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21334_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME11.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR16F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Tbilisi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEWDAT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01838_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\stdole.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\1.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\jfxrt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libstereo_widen_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Portable Devices\sqmapi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0300840.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\messageboxinfo.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\ClearExit.shtml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-oql.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\en-US\Sidebar.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00172_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\mshwLatin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14565_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4_1.0.800.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SIGN.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152590.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Clarity.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PG_INDEX.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099153.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0149118.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSAEXP30.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\pingsender.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0213243.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14830_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\intf\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\MAPISHELL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\OutUnpublish.tiff | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR46F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Paramaribo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Sofia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msado15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Yerevan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00454_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BROCHURE.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-filesystems.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\jvm.hprof.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Microsoft Office\Office14\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\spu\libmosaic_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Tell_City | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\spu\librss_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\tt.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MSTHED98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0295241.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\4.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00097_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Maldives | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Jamaica | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15169_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessData.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chicago | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\sqlxmlx.rll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBHD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ExpenseReport.xltx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\weather.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)grayStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\db\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00668_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ERROR.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Chatham | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-heapwalker.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00352_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIconMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsound.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBRPH1.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Defender\MpClient.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\StatusDoNotDisturb.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\psmachine_64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304405.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02361_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14980_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GKPowerPoint.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-heapwalker.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\SoftBlue.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0214948.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01300_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0287005.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libdav1d_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\row_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\PAPYRUS.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185800.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18250_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SCANPST.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\liba52_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\settings.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IPEDITOR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\oisctrl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SettingsInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\osclientcerts.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\flyout.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\ECHO.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01840_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\rmiregistry.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.war | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Windhoek | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLTASKR.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\ie9props.propdesc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\libGLESv2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanResume.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME48.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_Off.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14829_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239953.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05870_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONBttnOL.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSLaunch.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0300862.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232171.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0318448.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10263_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Palmer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Chuuk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102594.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\HAMMER.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB11.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\verify.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWRECS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-api-caching.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\mobile_browse.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libes_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0171847.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GFX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+12 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MLSHEXT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Angles.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLACCT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianMergeFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\networkinspection.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341534.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199755.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Krasnoyarsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Thawte Root Certificate.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086478.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.attach_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Midway | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0278882.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-9 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18203_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCD98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\YST9YDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285782.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00898_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02253_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\orb.idl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mouseover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01130_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7-zip.chm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Adelaide | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXPTOOWS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN044.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\external_extensions.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Rome | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341636.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02039_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Newsprint.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\WORDIRM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\npdeployJava1.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jce.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\defaults\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090783.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182946.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\rmiregistry.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14996_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313970.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Edmonton | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-options_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ast\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Tarawa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OSETUP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_italic.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceYi.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\io.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Menominee | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Winnipeg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ga\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msolui100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\21.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341448.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands_0.10.2.v20140424-2344.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\klist.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.THD | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXPSRV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21512_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCDDSLM.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.jdp_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Palau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0217872.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287641.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183168.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ga.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mouseover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Yakutsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\view.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099196.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105388.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SOCIALPROVIDER.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms_3.6.100.v20140422-1825.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Beige.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FPLACE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Makassar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Currie | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_Off.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Belize | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-bootstrap.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\el\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_zh-TW.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqloledb.rll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Luxembourg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\HST10 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychartplugin_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fontconfig.bfc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\AFTRNOON.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\back_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0234001.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDREQS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCD11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Dhaka | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\F12Tools.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02740G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR8B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TaxonomyControl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer_3.2.200.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-annotations-common.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0217302.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00268_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285360.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MCPS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHDHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0164153.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Settings.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\README.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14844_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\jamendo.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libt140_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341559.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESPS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\lij.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105336.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198016.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Flow.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR4B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_center.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\14.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Fortaleza | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msadrh15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0305257.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageSlice.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\extensions\VLSub.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\OPTINPS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099146.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400004.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Details.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102984.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198021.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME42.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZUSR12.ACCDU | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\wsimport.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME01.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART6.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\EXITEMS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wake | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187647.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03464_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENV98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157177.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABELHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0217262.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149481.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Process Library.fdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\dummy.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287415.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Checkers.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\Ole DB\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200467.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01468_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\TOC98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\greenStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1655.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Port_Moresby | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\cue.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tr.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveReport.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\net.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00256_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESNS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfo.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\29.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\SelectSave.rtf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106124.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18214_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLWVW.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.codec_1.6.0.v201305230611.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw32.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB01741L.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AGM.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195342.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200377.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00391_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01252_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0252349.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\currency.data | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR46B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Austin.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GreenTea.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\wabfind.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-io-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sl.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Honolulu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01472_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\button.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)grayStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02389_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02276_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00253_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN089.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadcer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187815.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\java-rmi.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\win32_MoveNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ospintl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONFLICT.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT98SP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\AcroRead.msi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200151.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME27.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Gambier | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309904.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Groove.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\MANUAL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00641_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\clock.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Chicago | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_is.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\skins\skin.dtd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSSKETLG.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\PINELUMB.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\MSOERES.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-PT.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\npvlc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18196_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWSTRUCT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.filetransfer_5.0.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicHandle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-queries.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroTextExtractor.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106208.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrowMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\grayStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234687.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Media Renderer\RenderingControl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadox28.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\Timeline.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\CST6CDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Reference Assemblies\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextServiceYi.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSSKETSM.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-12 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\VideoLAN Website.url | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\cryptocme2.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\STUDIO.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00525_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01566_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-execution.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKACC.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01954_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281243.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01235U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14692_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14870_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\VBAOWS10.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\EmbeddedView.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\LISTBOX.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-util-enumerations.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-core.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Metlakatla | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ru.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\XDPFile_8.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR33B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\RPT2HTM4.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01842_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\SectionHeading.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\calendar.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099200.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.SYD | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Istanbul | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\iedvtool.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\AUTHZAX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\vlm.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0296288.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR12F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh89 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text_3.5.300.v20130515-1451.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\el.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Photo Viewer\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\rss.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0148757.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALENDAR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\Office64WW.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBPAGE.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Kerguelen | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\rmid.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\browser\features\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02758U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR23F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\youtube.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384885.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL022.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCRD98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\prism-d3d.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\WISC30.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-annotations-common.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\EnableWait.mpa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mousedown.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\RSSFeeds.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadcs.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\UTILITY.ACCDA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\1 Right.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107158.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Havana | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-desk.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\3082\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\JSProfilerCore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Magadan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+10 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00555_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR49F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR49F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\GMT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\MSCDM.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105332.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\BIBFORM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ORIG98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text_3.9.1.v20140827-1810.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Atikokan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\rtscom.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152884.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21448_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Brisbane | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\CoolType.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsImageTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\chrome.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Horizon.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21413_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Stationery\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher_1.3.0.v20140911-0143.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Monaco | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Amman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18232_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceSimplifiedShuangPin.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\ImagingEngine.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-attach.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\28.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\mip.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222019.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14529_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\MSB1FRAR.ITS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21481_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_blu.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145707.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GIFT.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\org.eclipse.rcp_root_4.4.0.v20141007-2301 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\unpack200.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libcache_block_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\README.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01157_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Khartoum | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\gradient.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14867_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\UndoRemove.ex_ | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01751_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBlankPage.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sl.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Eirunepe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\video_output\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02074U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341328.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Oslo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Choibalsan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.annotation_1.2.0.v201401042248.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedShuangPin.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\CURRENCY.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\service.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\deploy.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Brunei | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Pacific\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\sunec.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\meta_engine\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\modules\simplexml.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01213K.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00194_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-outline.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00218_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Perth | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\attach.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\npt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02125_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00608_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBCALSO.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\setup_wm.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic 2.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\StopIconMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\JFONT.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCOUPON.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LOGO98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\NOTEBOOK.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\java-rmi.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\eula.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Minsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Shorthand.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\wmlaunch.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32Info.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\ReadMe.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_cs.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUPLD.INTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Apex.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0251871.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNote-PipelineConfig.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-templates.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libudp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\setting_back.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\back.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\currency.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORTS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\javap.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\STUBBY1.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21519_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR44F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01748_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Country.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Fancy.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-US.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7FR.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00221_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmpconfig.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105384.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_off.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\java.policy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099194.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15301_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_LightSpirit.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mru_on_win7.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107516.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR38F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SUBMIT.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\sqloledb.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\en-US\jnwdui.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Perspective.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME19.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.MY.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLY98SP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\installer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\WATER.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\Presentation Designs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\24.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00938_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02048_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_Off.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-lookup.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\soundcloud.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EntityPicker.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Defender\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\2 Top.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\co.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_iw.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\resources.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\jconsole.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR51F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00114_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02503U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\wmplayer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Nome | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\platform.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\status.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color32.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\4.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18234_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLADD.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rio_Branco | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Module.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\audio_output\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.LIC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183174.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01237_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00246_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185774.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239965.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmpshare.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199469.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSAutogen.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\RTFHTML.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\time-span-16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\F12.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\IEShims.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-common.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Hebron | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSSOAPR3.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ru.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\java_crw_demo.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_it.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Auckland | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\10.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00603_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\6.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\jawt.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Rankin_Inlet | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107264.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387604.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21321_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_hu.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\oeimport.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\vlc16x16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152556.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\bin\dtplugin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301432.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00734_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_WMC_LogoText.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\MCESidebarCtrl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Sofia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107154.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Majuro | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Faculty.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107544.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\SAVE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\j2pcsc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18182_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Adobe.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmprph.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Background_QuickLaunch.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02749G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplateRTL.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\Install\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01006_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18212_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15133_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\ORG97R.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\init.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+6 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN102.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\ado\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN103.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\OFFREL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\template.msi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\MSB1FREN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\VSTARemotingServer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00557_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01421_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdate.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00373_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\ZY______.PFB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\SKY.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libps_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\jsdbgui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_da.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7wre_es.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\cpu.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\Parity.fx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBlankPage.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02263_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-api.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-tools.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\APIFile_8.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\mr.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Almaty | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Monaco | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01152_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Bangkok | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00808_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multiview.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\8.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187837.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Payment Type.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-loaders.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145272.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts2.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_pressed.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msxactps.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239951.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\bod_r.TTF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Reykjavik | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216588.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR4F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsDoNotTrust.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0300520.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18228_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA000C.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee90.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\1.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\kk.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_win.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-actions.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Australia\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.hsp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0294991.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\policytool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows NT\TableTextService\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\wabfind.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\OPHPROXY.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099151.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14752_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR18F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_mac.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MML2OMML.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\servertool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304875.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10300_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\msdbg2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Soft Blue.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\ActionsPane3.xsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OUTGOING.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\25.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\networkinspection.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-api.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackground.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_zh_HK.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090390.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382960.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Casual.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libxml_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02055_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME29.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EXLIRM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALSO11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\perf_nt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01239_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00671_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\vi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\INDUST.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198447.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\vimeo.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02287_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AboutBox.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\EmptyDatabase.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_de.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196354.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7tkjp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-heapdump.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Tunis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4.ssl_1.0.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-modules_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN110.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Photo Viewer\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mn.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\libgestures_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18211_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099164.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Discussion.gta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\LASER.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONMAIN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02094_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Wordcnv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfig.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14828_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\attention.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\services_discovery\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\mpvis.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287643.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03012U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sq.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\36.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\JOURNAL.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONWordAddin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Petersburg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\vcruntime140.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\40.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\libxslt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\javafx-font.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Qyzylorda | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\activity16v.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\4.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Thatch.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSACC.OLB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0156537.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REMOTE.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_mid.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\d3dcompiler_47.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00058_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7fr.kic | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\eula.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Hong_Kong | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadcfr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\LICENSE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse_2.1.200.v20140512-1650.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\42.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\tr.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextService.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\ieinstal.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\2d.x3d | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\wab32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-modules.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\custom.lua | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Graph.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185828.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\te.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SUBMIT.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212299.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\MSOHTMED.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03731_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01747_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02073_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_decreaseindent.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_floating.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186364.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLPERF.H | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\excel.exe.manifest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\modules\sandbox.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\tl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL048.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBAR11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\bg_sidebar.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Hovd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\SkipOptimize.aifc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PDDom.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\EDGE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309902.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382927.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\OmdBase.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Median.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\add_reviewer.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACER3X.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CGMIMP32.HLP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONPPTAddin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\UserControl.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\nb\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\PingUndo.reg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01299_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15172_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Hierarchy.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MsMpRes.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Zaporozhye | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\SecStoreFile.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309664.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21308_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\VelvetRose.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XLMACRO.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\perfcore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Khandyga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Moscow | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\ImagingEngine.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\navBack.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\BOLDSTRI.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_on.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3ES.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02218_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\PINELUMB.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\RICHED20.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14595_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_orange.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+1 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Funafuti | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\booklist.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\local_policy.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\luac.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21329_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libEGL.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\VBE6EXT.OLB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14580_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Atikokan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Caracas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\glass.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107358.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313974.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01848_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21327_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.UK.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0281904.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Omsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00068_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PSTPRX32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\Wks9Pxy.cnv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00784_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\SOCIALCONNECTORRES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticnotification.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\requests\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105282.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115841.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Synchronization Services\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\js\jquery.jstree.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239191.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_drop_shadow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-applemenu.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\JOURNAL.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309480.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Essential.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7MDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0293800.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows NT\TableTextService\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Status.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\en-US\MsMpRes.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\TabTip32.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01575_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Goose_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.config | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285808.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Enderbury | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\slideShow.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\email_all.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\PAB.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Earthy.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\sqmapi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\rt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\ZoneInfoMappings | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15155_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\MMHMM.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL090.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)notConnectedStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jawt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Boise | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02223U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\COMPUTER.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153307.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01852_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\FONTSCHM.INI | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\11.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\SONORA.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Monterrey | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\IACOM2.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-9 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bogota | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Amsterdam | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309585.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lt.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nassau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.CMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\EXPEDITN.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR34F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR50B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01746_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.core_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Kiritimati | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7z.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\sa-jdi.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEXBE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\utilityfunctions.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunec.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrome.7z | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\features\[email protected] | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msadox28.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239997.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Media Renderer\DMR_48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01560_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01590_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\MINUS.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\El_Salvador | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fa\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\DW\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00935_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15272_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHKEY.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTAREA.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBWZINT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Uzhgorod | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\eclipse_update_120.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152430.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0280468.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OART.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieResume.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunmscapi.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\calendar.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt_0.12.1.v20140903-1023.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\meta-index | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00956_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Chita | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN092.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03451_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105526.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hi.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Martinique | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Bermuda | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows NT\TableTextService\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198022.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPQUOT.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14755_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME39.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\updater.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\ucrtbase.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\ENUtxt.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME07.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\misc.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\picturePuzzle.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145810.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105320.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\CAN.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\sbdrop.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Stanley | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.APL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01149_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Hardcover.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\diagnostic-command-16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-search.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-modules-profiler_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PPKLite.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hr.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsColorChart.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216570.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01066_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7-zip.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Lima | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Mauritius | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Chatham | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-dock.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOffNotificationInAcrobat.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00685_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01866_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RSSITEM.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14656_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341645.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+11 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.filesystem_1.4.100.v20140514-1614.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator_3.3.300.v20140518-1928.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Dawson | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\DefaultBlackAndWhite.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mr.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\3difr.x3d | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00391_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\EXITEML.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-search.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\omni.ja | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\nss3.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\RTC.der | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sa.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RESENDL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt_0.12.100.v20140530-1436.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Journal.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198102.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DOC.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUNGLE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookbig.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox_1.0.500.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\jfr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Reykjavik | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099176.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105280.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ms.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0335112.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\wabimp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00389_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\AUMProduct.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03014_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LETTHEAD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\stream_out\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AIR98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\kab.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Nicosia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOHEV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\7.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240189.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MP00132_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03205I.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21319_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunec.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\ssvagent.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GostName.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\6.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099203.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mouseout.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_id.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341499.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\PST8PDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\ResetMerge.m4a | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEOLEDB.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00633_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Karachi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\classlist | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-lib-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR49B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART5.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBPQT.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SAMPLES\SOLVSAMP.XLS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.stdformat.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-4.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106816.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01361_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\CALENDAR.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Tulip.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\an.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Bogota | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18225_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\spacer_highlights.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\v8_context_snapshot.bin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\29.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\VBE7.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02759J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\BUZZ.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\SIGNUP\install.ins | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\cmm\sRGB.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0230553.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\CollectSignatures_Init.xsn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGNAVBAR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multitabs.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-options.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099177.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281630.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02750U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\klist.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Adobe.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18237_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_cs.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\digest.s | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_zh-CN.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\15.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EADOCUMENTAPPROVAL_REVIEW.XSN | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Simple.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\HORN.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-awt.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_joined.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\REMINDER.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util_1.7.0.v201011041433.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXEV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\VISSHE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\DefaultID.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\GWE.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00704_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18238_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Form.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sampler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\iexplore.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libflaschen_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\MSPVWCTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\tpcps.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pa\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\VOLTAGE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME23.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ContactSelector.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Rainy_River | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\sqlite.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\MSOSV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME33.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCARD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialResume.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\CONCRETE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183290.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15184_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDRESN.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Costa_Rica | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\MediaReceiverRegistrar.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\EDGE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21302_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PICSTYLES.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\F12Tools.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00998_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05930_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONTACT.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL027.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\javadoc.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nipigon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188669.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02810J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_TexturedBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNote.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\core_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_es.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107344.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01123_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLPH.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\dragHandle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Karachi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Norfolk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.runtime_3.10.0.v20140318-2214.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\localedata.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Syowa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\alertIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ar.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\jsdebuggeride.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Media Player\Network Sharing\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\1.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\19.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\penkor.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTFORM.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PROGRAM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libavi_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107452.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200183.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297757.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGATNGET.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\icudt36.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0229385.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN097.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Stock Quotes.iqy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Juneau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Maputo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02120_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15056_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293844.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util.gui_1.7.0.v200903091627.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\.lastModified | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Grayscale.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vilnius | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdatt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR22F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18191_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\dcpr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Rothera | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\tnameserv.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Antigua | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CRT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\OARPMANR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187921.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115876.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL111.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fa.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SPANISH.LNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Photo Viewer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-output2.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Amsterdam | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\AST4ADT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME40.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02412K.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00913_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Horizon.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKACCL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN090.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore_2.10.1.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\SNET.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143746.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\ODBC.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\WARN.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignleft.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLRPC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Porto_Velho | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\en-US\MpEvMsg.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\LINEAR_RGB.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Macquarie | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\sd\icecast.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACERCLR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237336.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18244_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaSansRegular.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-12 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.clusters | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mspub.exe.manifest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\1100.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-visual.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143758.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Newsprint.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libpva_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\info.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18253_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\PhotoBase.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.SYX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0252669.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00683_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\27.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02748U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02791_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Premium.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\libxml2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\36.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Belgrade | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\mozavutil.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\AFTRNOON.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00685_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18208_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Adobe.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Shanghai | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPrintTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099172.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Bahia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\br.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\ECLIPSE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00034_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01839_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Ho_Chi_Minh | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-today.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0390072.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PICCAP98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\alt-rt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+7 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-coredump.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL104.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\SynchronizationEula.rtf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\WindowsPowerShell\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PRRT.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR1B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\WHOOSH.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL075.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Tasks.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Sales Pipeline.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\CST6CDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pohnpei | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Guyana | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_bezel.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\tr.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107446.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182689.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPLTMPL.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SIGNS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libscte27_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Cayenne | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\sd\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099174.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00916_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santiago | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME09.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\PMAILEXT.ECF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\macroprogress.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN105.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\BloodPressureTracker.xltx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_socket.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_received.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14795_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB9.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdaosp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSProxy32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Kaliningrad | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\ended_review_or_form.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00760L.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\MemoryAnalyzer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00052_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jps.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\blafdoc.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\ant-javafx.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-uihandler.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadcf.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18224_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME12.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Fakaofo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2native.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\el.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02736G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14516_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\ACT3R.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\INTLDATE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.CGM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa37.hyp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Santa_Isabel | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\org-openide-filesystems.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Luis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCOLKI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Marquesas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-progress.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+2 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Majuro | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX9.x3d | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00211_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18222_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\Other-48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tl.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\InkObj.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382970.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-4 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01301_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Currie | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\rt3d.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\eng.hyp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099183.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\RECALL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Madrid | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\README.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\en-US\msdaorar.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152698.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01701_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_underline.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.NO.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GIFT.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kaliningrad | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18220_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\bdcmetadataresource.xsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CHECKBOX.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jabswitch.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107182.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\grvschema.xsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libasf_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\BREEZE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLJRNLR.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Azores | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Installed_resources14.xss | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Skins\Revert.wmz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02829J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0229389.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME51.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR1B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7FR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Northwind.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\THROAT.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107302.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Discussion.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kiev | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ContactPickerIntl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\COUPON.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\wab.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME54.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR51B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Code_Signing_2001-4_CA.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Novokuznetsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\jnwmon.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240157.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0211949.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pontianak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\DW\DBGHELP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_preferencestyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Ojinaga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageScript.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\sonicsptransform.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Asuncion | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\EST5EDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\TipBand.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME05.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-uisupport.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145879.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BS2BARB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Ceuta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME10.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\BOMB.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB2A.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01562U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME52.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+9 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Ushuaia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kwajalein | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Colombo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\JP2KLib.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099179.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\row_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-execution.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\rmiregistry.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.contenttype_3.4.200.v20140207-1251.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\cs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00095_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLV.PPT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\az\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\OLKFSTUB.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadce.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ps.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15273_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\clock.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02746G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099195.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\adcvbs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher_1.3.0.v20140415-2008.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7wre_fr.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.MX.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CLICK.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pl.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_zh_TW.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\WindowsPowerShell\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105232.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02082_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\js\controllers.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadds.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\eula.rtf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Macquarie | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Pago_Pago | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\vi.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7FR.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice-install.log | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\PhotoBase.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309920.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00910_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\List.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-core-kit.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\44.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1CORE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN107.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Andorra | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfontj2d.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\uninstall\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\WATERMAR.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-output2.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-14 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232395.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382957.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR37F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\ATPVBAEN.XLAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AWARDHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\F12Tools.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mexico_City | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-disable.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Roses.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBCN6.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateComRegisterShell64.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\LOCALDV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105410.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188667.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152602.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1033\MSGR3EN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Technic.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR44B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.shell_0.10.0.v201212101605.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-explorer.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-nodes.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\plugins.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21300_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14883_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\StatusOnline.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.ComponentModel.DataAnnotations.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_Undocked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+4 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Jayapura | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174635.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01236_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSO.ACL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR39F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\ACCOLK.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\invalid32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\db\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-10 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Tags.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\ResourceInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9YDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14533_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hr.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21534_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Cocos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\java-rmi.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_bottom.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\InfoPathWelcomeImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENV11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.hyp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01242_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216724.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\47.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\NOTE.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msaddsr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\MSOSVINT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_es-419.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\is.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\submission_history.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00915_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\zipfs.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ja_JP.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Grand_Turk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Creston | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\te\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107364.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341557.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\en-US\TableTextService.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\w2k_lsa_auth.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Guatemala | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR43B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OLKIRMV.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceoledb35.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\23.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadce.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ENGDIC.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SNIPE.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216153.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\sound.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01473_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_mid_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\Stationery\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadds.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\charsets.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBLINK.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\picturePuzzle.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mng.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.common_2.10.1.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10297_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WPULQT98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoDev.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\utilityfunctions.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macTSFrame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00487_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\speaker-32.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\sound.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app_1.0.300.v20140228-1829.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\helpmap.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RESP98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jarsigner.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-impl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\en_GB\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_Off.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187817.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SHARING.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_underline.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Wordcnvpxy.cnv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\TextFile.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02201_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL092.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALENDAR.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\XmlFile.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-options.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\RADIO.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN065.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl-hot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\plugin.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\derby_common.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Campo_Grande | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_choosefont.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\ACT3.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-desk.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FEZIP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\adcjavas.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libdca_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\7.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\EVRGREEN.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101864.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGREPFRM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLN.DOC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBrowserUpgrade.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR6F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.metadataprovider.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Qatar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_en.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02746U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ky.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\add_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSRTEDIT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Araguaina | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107314.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198372.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR25F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Port_Moresby | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\41.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02280_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYVERTBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-10 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvmstat.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107480.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287020.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\St_Johns | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-settings.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_de.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Eucla | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\as_IN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188587.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01041_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\QuizShow.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanMergeFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME04.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\jnwdui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FBIBLIO.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME08.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\da.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\zip.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\STUDIO.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Flow.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15135_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME22.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLCTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can129.hsp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MLCFG32.CPL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGNHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198234.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297749.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDCNCLS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\WMPMediaSharing.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-dock.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Phoenix | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pe.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-spi-quicksearch.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\logger\libconsole_logger_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107730.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03331_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.bidi_0.10.0.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_disable.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107494.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE06450_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_hyperlink.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedbck2.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_win7.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00453_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18236_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\form_edit.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosecolor.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Darwin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Prague | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Taipei | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\ProPlusWW.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\QUAD.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239973.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0282126.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART3.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PEOPLEDATAHANDLER.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02373_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libwall_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18249_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Traditional.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL082.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.WIH | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01158_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00820_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0251925.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBAR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18217_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115842.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDCNCL.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL106.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\oracle.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387578.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-14 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpClient.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\profilerinterface.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\South_Georgia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\lgpllibs.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185778.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199473.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Issues.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143750.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Lima | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jsound.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\jfr.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Dili | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Client.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301418.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdatl3.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libty_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\COMPASS.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099199.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0295069.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\form_edit.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\MDIParent.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386270.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Windhoek | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextServiceArray.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_te.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CONTACT.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guam | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\COMBOBOX.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_bkg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-7 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\INLAUNCH.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Simferopol | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64_3.103.1.v20140903-1947.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00806_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\MSBuild\Microsoft\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker_1.1.200.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Internet Explorer\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\DiagnosticsTap.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Internet Explorer\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMAIN.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\HEADINGBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mng2.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287019.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IT.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ru.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ta.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178632.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\STSCOPY.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libsmb_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\picturePuzzle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Bucharest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Dublin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Services\verisign.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21328_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jabswitch.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-progress-ui.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143753.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Module.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0157763.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0305493.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Casual.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Lisbon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsVersion1Warning.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Country.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-queries.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Puerto_Rico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Opulent.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\BREEZE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\powerpnt.exe.manifest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Tahiti | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14871_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RCLRPT.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Shanghai | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdaora.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0089992.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WHIRL2.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CONTACTINFOBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\README.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-options-keymap.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Nauru | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_pt-PT.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18254_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OLKFSTUB.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103058.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382947.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00289_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18235_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Pitchbook.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR5F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Kwajalein | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME16.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBOX.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CST6CDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR31F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Montevideo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MAPISHELL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\GroupImport.vbs | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1CACH.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ru.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7Handle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libhds_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0088542.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\management.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\SignedComponents.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\modules\httprequests.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238333.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\conticon.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS2SWOOS.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIcons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_basestyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ro\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00388_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baghdad | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\SAMPLES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00157_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Buenos_Aires | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099198.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02384_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14981_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21331_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PROGRAM.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-vertical.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7en.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\VVIEWRES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-uisupport.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdaps.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSYUBIN7.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ACCSBAR.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Troll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\spu\libsubsdelay_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIconsMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGAD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\glass_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\file_obj.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvmstat.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Dawson_Creek | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\lua\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSDecWrp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309705.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-common.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Winamac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\text_renderer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\1.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18190_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7ES.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Internet Explorer\SIGNUP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jp2iexp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341561.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02265_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\da.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\uninstall\uninstall.log | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\index.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libprefetch_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02269_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\VVIEWDWG.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guadalcanal | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Tokyo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153047.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTITL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyclient.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Ndjamena | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Chagos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\86.0.4240.111_chrome_installer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00915_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR28F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageScript.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RESUME.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0136865.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWORIENT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\39.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh89 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\45.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ca.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105276.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287018.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR21F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01858_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15168_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21313_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\INFOMS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Bermuda | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jaas_nt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Caracas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Xlate_Complete.xsn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\3082\MSO.ACL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Seoul | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property_1.4.200.v20140214-0004.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine_2.3.0.v20140506-1720.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ar\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Composite.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21301_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Brisbane | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNoteNames.gpd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hi.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME15.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\classfile_constants.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libtta_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7EN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Phone.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jfr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\mobile_view.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\PUSH.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santa_Isabel | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Rio_Branco | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\vlc.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\10.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\playlist\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpOAV.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\MSB1FREN.ITS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Groove.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONFILTER.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\javah.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\RSSFeeds.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RSPMECH.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONTACTS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\10.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSOSEC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\meta-index | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\rt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\blocklist.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_bg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107280.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\resources.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives_1.1.100.v20140523-0116.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-print.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-attach.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Riga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\eqnedt32.exe.manifest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\CR_02A57.tmp\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\kinit.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.jobs_3.6.0.v20140424-0053.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301050.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGTOC.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Beirut | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ml.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195248.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Barbados | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\firefox.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libopus_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\bl.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OUTEX.ECF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Beulah | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\NETWORK.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-BR.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\Audio-48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151055.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\XLCALL32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301052.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15173_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageStyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\31.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\nio.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-sampler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdaurl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18255_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\UTC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXP_PDF.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\REFINED.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\launcher.win32.win32.x86_64.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152690.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21295_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\applet\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\WTSP61MS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLV.DOC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\chrome_proxy.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multiview.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\GMT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\CST6 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Seyes.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00943_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Media Player\Icons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\D3DCompiler_47.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-options.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Bougainville | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00809_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR29B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZTOOL.ACCDE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178523.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\kaa.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\id.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\dt_shmem.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01239K.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7z.sfx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_lg.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\DumontDUrville | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACERECR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107734.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149407.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\DVDMaker.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Genko_2.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00882_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\Custom.propdesc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application-views.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215210.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ENGIDX.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-middle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\ado\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-tabcontrol.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\MMSL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\SetupMetrics\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\trash.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099202.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21311_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGREPFRM.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\BodyPaneBackground.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\maintenanceservice.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00170_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPISHELLR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1036\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART8.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Oral | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR35F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePageBlank.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\12.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.oracle.jmc.executable.win32.win32.x86_64_5.5.0 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Rangoon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRINTL32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME13.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01253_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\AUMProduct.aup | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\MSMAPI\1033\MSMAPI32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107712.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OOFTMPL.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0148798.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OCLTINT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\TECHTOOL.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-execution.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\US_export_policy.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\26.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ko.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoCanary.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACECORE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMaskRTL.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\javafx.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Regina | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\weather.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01236U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00199_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00482_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN001.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSSOAP30.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ur.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0089945.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01743_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Maceio | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Chihuahua | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Paper.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14756_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition.fdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\serialver.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.FLT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107290.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\EditRegister.xltm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\EST5EDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Baku | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107308.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FORM.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL107.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ku-ckb.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLWVW.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME34.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Stanley | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\DiagnosticsHub.DataWarehouse.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Whitehorse | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\EVRGREEN.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090777.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215076.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ka.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Composite.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0157995.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00732_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\Microsoft.Ink.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101980.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SlateBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\networkinspection.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR12F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianReport.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\cs.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR36F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\INCOMING.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\WindowsPowerShell\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ne\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXP_XPS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\FUNCRES.XLAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OLMAPI32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Los_Angeles | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.lock | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_it.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02431_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Scoresbysund | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcfr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00192_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.FR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sr-spc.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\D3DCompiler_47.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+1 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\service.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdate.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00005_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00177_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sk.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02067_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCESS12.ACC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WHITEBOX.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.event_1.3.100.v20140115-1647.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR7F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\New_York | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\title.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\mshwLatin.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MUOPTIN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Doc.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR8F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-windows.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14793_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Srednekolymsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR48B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEDAO.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libogg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDBAR98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.services_1.2.1.v20140808-1251.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\Download\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143743.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PPTIRMV.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk_1.0.300.v20140407-1803.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\sunmscapi.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN082.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\setting_back.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0228959.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ogalegit.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wallis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\Accessories\WordpadFilter.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Hardcover.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15035_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Wake | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\mlib_image.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105288.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\CASCADE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099149.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7db.kic | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\server\Xusage.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Knox | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153091.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01356_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02097_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\IPDSINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\TURABIAN.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielMergeLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DVA.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0324704.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateBroker.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WING2.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR24F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tahiti | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\slideshow_glass_frame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\40.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02262_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Media Player\Network Sharing\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee90.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\orbd.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\weather.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00260_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREETING.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\Notebook03.onepkg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\cy.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR45B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLINACC.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\tet\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02077_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21495_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\RTF_BOLD.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSans.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107528.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0205582.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft.NET\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\co\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\28.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105912.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292272.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01247U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-search_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mouseout.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-tabcontrol.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libcache_read_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239057.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Elemental.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR28F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsoundds.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\HandPrints.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME21.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BORDERBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\activity16v.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)grayStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Concourse.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\MAIL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Name.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Monticello | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_hi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_disable.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWRECE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tegucigalpa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\Back-48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosecolor.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImagesMask256Colors.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNote.gpd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\wmpnssci.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Grand_Turk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GostTitle.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIcon.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\fieldswitch.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Month_Calendar.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\11.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\License.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7es.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\OrielFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14583_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MP00021_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN01308_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hovd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\33.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143745.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB10.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUDGESCH.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AXE8SharedExpat.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\SKY.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02166_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Module.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18198_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\th.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\wmpconfig.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107192.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_200_percent.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Swift_Current | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\RIPPLE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\SWBELL.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanPhotoAlbum.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fy.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0251007.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0279644.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADVTEL.DIC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Antigua | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00116_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00200_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15019_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7FR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\net.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Syowa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\win32\jawt_md.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\meta-index | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Cape_Verde | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Madeira | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115868.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\ARROW.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fil.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yakutat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Oslo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\PhotoViewer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0195384.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\SUBMIT.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Filters\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Couture.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCDDS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackgroundRTL.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kolkata | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\server\classes.jsa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\Folder-48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00636_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Opulent.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zCon.sfx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03241_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libcc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\MyriadCAD.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\cgg\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\oledb32r.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\WindowsPowerShell\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ext.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\install.log | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01294_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_AutoMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03339_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0251301.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18245_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ba.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup-impl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\CASCADE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099158.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188513.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285410.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\PLUS.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400001.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME06.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\excelcnv.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALNDR98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\XPAGE3C.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmpnssci.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195320.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382930.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLSTS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOUTL.OLB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Madeira | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Gibraltar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\images\cursors\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\CONCRETE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.Infopath.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\lv.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Magadan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Noumea | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_flyout.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pl.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOCFUIUTILITIESDLL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\demux\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.CNT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0294989.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382836.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application-views.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\video_splitter\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightRegular.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\oledb32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fa.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEIRM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Contacts.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightItalic.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240175.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.PH.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\et.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Cordoba | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090779.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Anchorage | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ashgabat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\jsprofilerui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01293_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115856.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\PASSWORD.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_pwa_launcher.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\icudtl.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382948.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Track Issues.fdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendtoOneNoteFilter.gpd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Melbourne | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\wa\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400002.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02886_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME45.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STRBRST.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00126_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-core-windows_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\slideshow_glass_frame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Salta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0187423.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OOFS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsColorChart.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yekaterinburg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\zipfs.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\14.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core_2.3.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\WATERMAR.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBSBR.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Ushuaia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\activity16v.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106572.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OFFLINE.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\af\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\redStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONTAB32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\default-browser-agent.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199609.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384900.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00542_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN109.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR32B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00728_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14800_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMARQ.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWSHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGN.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\DATES.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7jp.kic | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Johannesburg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Center | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.continuation_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\it\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Attachments.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.HK.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\16-on-black.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Shades of Blue.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02443_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02285_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\nn.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238983.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01462_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\COUGH.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-startup.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\CLIPART\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00531L.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10301_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR46F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\LICENSE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\dsn.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Flow.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSOSEC.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\README.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ar.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libexport_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\MSCONV97.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00208_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00222_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CNFNOT.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-io-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WCOMP98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\local_policy.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-text.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-core-kit.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageSlice.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.exe.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR49B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\America\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\abcpy.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105502.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Couture.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledb32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-j2se-1.0.2.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387882.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00638_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGTEAR.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\VSTO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OMSMAIN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tarawa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Rio_Gallegos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\glass.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui_3.106.0.v20140812-1751.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151047.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\LAUNCH.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\he.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145212.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199279.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dushanbe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\xmlrwbin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02404_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Mawson | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\javaws.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\video_filter\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\spacer_highlights.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281638.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02742G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB02229_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jvm.hprof.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.Server.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\24.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15059_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpEvMsg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_shared.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01905_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\ResourceInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\javafx-iio.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+5 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0197979.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387337.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin_2.0.100.v20131209-2144.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Madrid | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-io.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENVELOPE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\CST6 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.http_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOffNotificationInTray.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\MSBuild\Microsoft.Office.InfoPath.targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jsadebugd.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\uz\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_chromaprint_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\offset.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\IMCONTACT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\jvmticmlr.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Asuncion | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Rarotonga | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\new-trigger-wiz.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Pohnpei | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0302827.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18218_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\WIND.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART14.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBREF.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0292020.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IPOLK.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Marketing Projects.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00911_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Person.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieNewsletter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00018_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\Accessible.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00458_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBAD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\LICENSE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-nodes.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Orange Circles.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuching | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\PST8PDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\deploy.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\PROFILE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222017.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_VelvetRose.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\STOCKS.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_kn.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GKExcel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\GIGGLE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105368.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241043.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0240719.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OneNoteSyncPCIntl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\POLICIES.FDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL065.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\WMPDMCCore.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00390_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-13 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\blacklist | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02435_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Formal.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OnLineBusy.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03470_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\31.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Vladivostok | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ff\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\BREEZE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00232_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\decora-sse.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0196164.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\main.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR19F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107258.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107500.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Setup.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105396.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\RADAR.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Media Renderer\connectionmanager_dmr.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_bottom.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00204_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02262_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\StatusAway.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Interface.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FDATE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CA.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN075.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\currency.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Updater6\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21480_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Medium.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSPST32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluHandle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\server\jvm.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\WET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0144773.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01265U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYERHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javafx.policy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Half.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107488.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0304933.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\java.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Louisville | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Samarkand | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\PDFPrevHndlr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14790_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21548_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOCFU.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\RADIAL.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18247_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\header.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\en-US\ImagingDevices.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01572_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CAMERA.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro_3.4.200.v20130326-1254.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledb32r.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\MpRTP.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\template.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\7-Zip\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+8 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Verve.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN086.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7ES.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lord_Howe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Grid.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-api-caching.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18206_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QUIKPUBS.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookicon.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\New_York | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15136_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\SUMIPNTG.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\spu\libaudiobargraph_v_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can32.clx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21299_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSPPT.OLB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152876.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01627_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR4B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIcons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHD11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Casual.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.ES.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-3.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\ktab.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunmscapi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Singapore | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\PDIALOG.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdaenum.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoBeta.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Recife | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00723_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\decora-sse.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services_3.4.0.v20140312-2051.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-loaders.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CHIMES.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator_1.1.0.v20131217-1203.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Media Renderer\RenderingControl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099204.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02794_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IPIRMV.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.artifact.repository.prefs | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\ielowutil.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.util_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\content-types.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Vincennes | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Atlantic\Faroe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\gd\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\spu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR21F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\STSLISTI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SIGNL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ca\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\WatchExit.odt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\SmartTagInstall.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGAD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\jvm.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-lib-uihandler.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\index.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color32.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\10.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHighMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-options-api.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\mozglue.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0321179.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TAIL.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsImageTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Accra | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCARDHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OFFXML.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts2.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\FeedSync.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\F12Resources.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OUTLVBA.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\weather.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\dnsns.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.descriptorProvider.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet.jsp_2.2.0.v201112011158.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0296279.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01044_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\et.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Fortaleza | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME26.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\yo.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_distributed.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\uarrow.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPAPERS.INI | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\PABR.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Contacts.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00454_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSCOL11.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\Desktop\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\back_lrg.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_sun.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActionExceptionHandlers.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Pangnirtung | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Apia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\ECHO.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152436.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR40F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Angles.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmpnscfg.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\RPLBRF35.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\1px.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Hobart | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher_1.1.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\MET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\THEMES.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\IEShims.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02845G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_bullets.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pyongyang | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\STINTL.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00298_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR3F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\PipeTran.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)alertIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-horizontal.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADVCMP.DIC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSTORYVERT.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240389.profile.gz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105520.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\UserControl.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Ashgabat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02749U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.WPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01785_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME17.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBRPH2.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382961.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\WATER.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01461_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSN.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00014_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_client.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\HST | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Composite.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\NVBELL.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-settings.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02022_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Toronto | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\bin\plugin2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14801_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Modern.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ja.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14532_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_center.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMASTHD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\FiveRules.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\AST4 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\msadc\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386120.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02368_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hong_Kong | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_bn.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Technic.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234266.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Accra | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\plugin-container.exe.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Media Renderer\DMR_120.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mouseover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\PROCDB.XLAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libGLESv2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00668_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Start End Dates.accft | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01063_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.Infopath.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOCF.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Algiers | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL054.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-6 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.registry_1.1.300.v20130402-1529.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107152.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186360.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Azores | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\.lastModified | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Damascus | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\Words.pdf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\TIME.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105240.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0211981.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\awt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMSL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_it.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\jdwpTransport.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_sv.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Mail\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00516L.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CharSetTable.chr | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Uninstall Information\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_On.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\pipres.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Newsprint.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0196374.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePage.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\WORDIRMV.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\modules\dkjson.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-outline.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jaas_nt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Mendoza | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690Nmerical.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SplashScreen.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\adodb.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hebron | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Minsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400005.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14866_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME53.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\LOOKUP.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-spi-actions.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSIDEBR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Miquelon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00049_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14579_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21315_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\BCSRuntimeRes.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\AUDIOSEARCHSAPIFE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHigh.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03513_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\DiagnosticsTap.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232795.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.ssl_1.1.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\mobile.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285792.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\setup.swf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0228823.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN022.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Port_of_Spain | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145168.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Verve.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7cm_en.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\VisioCustom.propdesc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Media Player\Skins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Niue | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\artifacts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluTSFrame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099205.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_flyout.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\Ole DB\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME49.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDCNCLL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\PHONE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\brx\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\meta\art\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw48.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ta.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBlankPage.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN081.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\CodeFile.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Cambridge_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.JP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\deployJava1.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02398U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00837_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02862_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Lord_Howe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libshm_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBHW6.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21307_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSRuntime.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\meta\art\03_lastfm.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-disable.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Christmas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sv.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsfsstorage_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Esl\AiodLite.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ENGLISH.LNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\meta\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESPL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielMergeFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\New_Salem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157191.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Opulent.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105490.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SegoeChess.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.expressions_3.4.600.v20140128-0851.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\slideShow.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\adovbs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285926.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\send-email-16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BCSEvents.man | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10256_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0278702.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301480.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg_orange.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Classic.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAILMOD.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPWEC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103402.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\EXPLODE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.conf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSO0127.ACL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\RECYCLE.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\PROFILE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00942_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\dtplugin\deployJava1.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152716.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195772.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0291794.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\SessionMember.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tunis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00452_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\flyout.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\La_Paz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Jerusalem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Premium.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\ARCTIC.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\doclib.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Dushanbe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Simferopol | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\USP10.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02126_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Winamac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\wab.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\macroprogress.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15302_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdasc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Adak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_sun.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18248_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL001.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator_2.0.0.v20131217-1203.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt32.clx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\LEVEL.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107254.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241077.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\XLCPRTID.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153516.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099192.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\date-span-16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\MSB1ESEN.ITS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105846.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00489_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PAPERS.INI | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\RMNSQUE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106958.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00183_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\CALENDAR.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBPAGE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\alt-rt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-applemenu.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Media Player\Skins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216516.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Istanbul | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297551.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Graph.exe.manifest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DOTS.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Malta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\13.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR11F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IEAWSDC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\cacerts | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\t2k.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\sd\jamendo.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01357_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR48F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msdaprsr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02264_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Austin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR27F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg_sml.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\WindowsAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\extensibility.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00006_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\eng32.clx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198712.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Custom.propdesc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mauritius | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-execution.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18207_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\modules\common.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CUP.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fi.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01568_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Invite or Link.one | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03668_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Santo_Domingo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\xul.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.SE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLOGO.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Response.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-dock.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14691_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Paris | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_ko.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Grid.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199805.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\subscription.xsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\17.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\appletrailers.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\airappinstaller.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00917_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\NEWS.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\eventlog_provider.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\help.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01491_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143752.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DissolveNoise.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.HK.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ku.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\access_output\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR31F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\builtincontrolsschema.xsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ho_Chi_Minh | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviewers.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341742.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0300912.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18200_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14581_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL096.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FORMCTL.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\5.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)notConnectedStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00485_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanMergeLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baku | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mai\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\0.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02417_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\107.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\WMPDMCCore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services_1.1.0.v20140328-1925.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107722.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18257_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplateRTL.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORM.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libvdr_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pmd.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Roses.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107490.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-explorer.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLAPPTR.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kiritimati | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Costa_Rica | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01563_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Civic.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15132_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansRegular.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\REPTWIZ.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-compat_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\MSTAG.TLB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\MSB1ENES.ITS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yellowknife | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237228.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02465_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18194_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\bg.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Troll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-core.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14693_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107658.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Tripoli | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Person.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN002.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\notConnectedStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01470_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WhiteboxMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN096.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-execution.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\InformationIcon.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\XIMAGE3B.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\keytool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\add_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18229_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TipsImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIconMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\TYPE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Major Indicies.iqy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Vostok | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\search_background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00686_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\BTOPENWORLD.COM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\OmdProject.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\Office64MUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0235319.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENVELOPE.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadco.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\ShadesOfBlue.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18201_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESTS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGZIPC.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PRRTINST.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WING1.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ModifiedTelespace.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\EmptyDatabase.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-7 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.data\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\imap.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\rmid.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\psuser_64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\orbd.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\java.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196364.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XLLEX.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART2.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageStyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked-loading.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101862.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21336_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Hobart | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387591.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15275_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Choibalsan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-javahelp.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\dumpmeta.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\info.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287024.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FOLDPROJ.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\JAWTAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\picturePuzzle.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\34.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215710.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299763.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BANNER.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\wab32res.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\be\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\LINE.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKREQ.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZCARD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\9.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroBroker.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\DAO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Management.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.BusinessData.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dataset.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\27.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Bissau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157167.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR7F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\navBack.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\sidebar.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OCRHC.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows NT\Accessories\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_play.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0240695.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\33.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_pt_BR.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-queries.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01478U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\ELPHRG01.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\en.ttt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382944.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02261_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10268_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.FNT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105306.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216612.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00578_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Off.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Monrovia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.TTS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Premium.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\cmm\PYCC.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0185604.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.Infopath.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextServiceDaYi.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-windows.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\net.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341344.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00523_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15276_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\TexturedBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\DBGHELP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jsse.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Moncton | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\AXIS.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Equity.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\README.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01395_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR26F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR23F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\STSLIST.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_CN.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Creston | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\rjmx.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-attach.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\SLINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153087.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02755U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Adelaide | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePage.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dili | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-cli.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\hprof.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212219.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\OFFISUPP.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-today.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\39.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0160590.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00382_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR7B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Dawson | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152594.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WZCNFLCT.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.access | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsImageTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-desk.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\boot_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382967.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18243_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\LightSpirit.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21332_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Mail\en-US\msoeres.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\uk.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EADOCUMENTAPPROVAL_INIT.XSN | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsdt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Amman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099175.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Defender\en-US\MpEvMsg.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\OrangeCircles.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00807_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00934_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR14F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPUNCT.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Media Player\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-utilities.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\blank.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_LightSpirit.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\System.AddIn.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\search_background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Melbourne | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msado20.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\wab32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sao_Paulo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Santarem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Tallinn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR35B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Algiers | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository_1.1.300.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\timeZones.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\LAUNCH.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Mail\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\iediagcmd.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\SATIN.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSWAVY.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01742_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdaremr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198020.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\SpeechEngines\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\WindowsAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105414.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0230558.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10298_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\eu.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Phoenix | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOffMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveNewsletter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Client.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\fontmanager.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libsdl_image_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\images\bing.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\plugin2\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00190_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\ContentDirectory.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdaorar.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageScript.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hardware Tracker.fdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_left_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187893.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\end_review.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153514.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\id.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\info.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\Xlate_Init.xsn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECURE.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sendopts.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\amd64\jvm.cfg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151041.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\contbig.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\jfluid-server_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jp2native.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Vancouver | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\jsprofilerui.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107744.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OMSSMS.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.Design.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086424.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\ieinstal.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105298.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PPINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\VVIEWER.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01561_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jdwp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\AUTHORS.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Messenger.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.mshtml.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSLID.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msdaprst.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105386.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Updater.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition - Customized.fdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-plaf.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-explorer.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\lt\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msadomd28.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_increaseindent.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginMergeFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Pangnirtung | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Temp\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-uisupport.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Palmer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sampler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.inject_1.0.0.v20091030.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-5 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.ComponentModel.DataAnnotations.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212701.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115875.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\adojavas.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePage.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\IMPMAIL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\include\jni.h | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\invalid32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\qipcap64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199661.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\STOCKS.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02743G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OWSHLP10.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\mlib_image.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\core_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Shared Gadgets\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\5.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.swf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\MSB1ENFR.ITS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1AR.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sw.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\db\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187825.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLR.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\attention.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0172035.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNoteSyncPC.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_hail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.jetty_3.0.200.v20131021-1843.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ro.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\mn\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14539_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14845_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\TOOLICON.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceArray.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.util_1.0.500.v20130404-1337.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105638.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_OliveGreen.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMaskSmall.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152414.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14982_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OIMG.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-execution.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AD.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\QUAD.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15057_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\management.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21520_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR50F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Groove.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.ID.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\JAWTAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02413_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02444_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR1F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jakarta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\SONORA.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\zh-cn.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Danmarkshavn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\ONLNTCOMLIB.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\WMPSideShowGadget.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME36.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ENVELOPE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\grayStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Cocos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\core_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01849_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01330_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.DE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCAL.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Indianapolis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\PICTIM32.FLT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02028K.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pt_BR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\RECOVR32.CNV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304861.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCDDSF.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\HICCUP.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGHEADING.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\npjp2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Casey | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\Timeline_is.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Prague | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\WMPSideShowGadget.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02155_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01931J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESNL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PPCORE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\SOLVER.XLAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ca.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-io-ui.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\ARCTIC.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBENDF98.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_no.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\content-types.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\STSLIST.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\libvlccore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPIR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSOSTYLE.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mac.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03224I.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\flyout.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-middle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\PST8PDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.LTS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLADDR.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Rio_Gallegos | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\topnav.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Abidjan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Noronha | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\MSBuild\Microsoft\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libgme_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-3 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01680_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0146142.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00914_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR13F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nl.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\ICE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\handler.reg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198025.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\TextConv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00423_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)greenStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-options.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215709.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Santiago | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can.hyp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dhaka | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\25.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\SETUP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02071U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.password.template | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\meta\reader\filename.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382939.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME32.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\calendar.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands_3.6.100.v20140528-1422.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\ink\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt04.hsp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0233070.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Berlin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\kinit.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18227_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Sydney | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00478_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPICCAP.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jli.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\en-US\msaddsr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-execution.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fa.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107458.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\StaticText.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.BR.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Stars.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw48.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Empty.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadcfr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199465.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02041_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02093_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01240_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01268_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL016.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGN98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TipsImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCH98SP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SHAREPOINTPROVIDER.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\HxRuntime.HxS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\1033\BHOINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145373.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\cursors.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-modules-appui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-keymap.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\dailymotion.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw32.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateOnDemand.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15020_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDREQ.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\AUDIOSEARCHMAIN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\MSOHEVI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bn.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActions.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\iexplore.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\sidebar.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\launcher.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107708.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115844.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\1.3.35.452\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15018_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNOteFilter.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Photo Viewer\en-US\PhotoAcq.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1665.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.events_3.0.0.draft20060413_v201105210656.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\tr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\zu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\WindowsPowerShell\Configuration\Schema\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\msdbg2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03041I.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR42F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Defender\MpOAV.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187849.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18251_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DATE.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\26.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-horizontal.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-io.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03466_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf_3.4.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\gstreamer-lite.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jsoundds.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200611.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\kcms.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293240.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME14.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\orbd.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105244.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosefont.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Makassar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\calendar.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151045.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03459_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIconsMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Easter | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Beirut | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03380I.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00367_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\TexturedBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Media Player\Media Renderer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\intf\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msaddsr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\msadc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Bahia_Banderas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEMANAGED.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\ieproxy.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\COPYRIGHT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs-nio2.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-2 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadrh15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\A3DUtility.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\open_original_form.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01744_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-disable.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)greenStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPEQU532.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02464_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\3082\MSGR3ES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\messages_ja.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Guadalcanal | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ml\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0234000.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUNGLE.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\gu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.di.extensions_0.12.0.v20140417-2033.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00178_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\IPMS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityResume.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\Documentation.url | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santo_Domingo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00513_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7ES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)notConnectedStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Maldives | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01797_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382926.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\XML2WORD.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107750.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02897J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR32F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\SNEEZE.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.io_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Lindeman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\NBDoc.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Full.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR33F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ulaanbaatar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15058_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\validation.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\logo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\en-US\sbdrop.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3EN.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00272_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.CN.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\PLANNERS.ONE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\VSTAClientPkg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200383.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\InkSeg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME43.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Vancouver | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UTC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151073.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EntityPickerIntl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\handsafe.reg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\acro20.lng | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN01165_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNoteUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\wmpnscfg.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OSetupPS.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Policies\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\CR_02A57.tmp\setup.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Adjacency.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\Templates\Genko_1.jtp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EMABLT32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Moscow | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\clock.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\email_initiator.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME47.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\pack200.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\eula.rtf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FORM.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\deploy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107728.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18189_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\AccessibleHandler.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\NamedURLs.HxK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198226.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\MLA.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Guayaquil | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\highDpiImageSwap.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099163.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099171.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\APA.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\soniccolorconverter.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\cy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\drag.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\psuser.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE04050_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01244_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-dialogs.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN048.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\firefox.exe.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Defender\en-US\MpAsDesc.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\flyout_background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Perspective.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Dialog.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextService.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\javaws.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+3 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\nio.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Atlantic\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\wab32res.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02470U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\IPM.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\La_Rioja | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\ROGERS.COM.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msado26.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-templates.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw120.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\engphon.env | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\AddIns.store | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0214934.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Essential.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FOLDPROJ.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\43.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\js\common.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libkate_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153299.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01565_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR9F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows NT\TableTextService\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\flyout.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\ado\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02282_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0205466.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Generic.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CNFRES.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBCOLOR.SCM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\access-bridge-64.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ks_IN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\libdummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10335_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\INFOMAIL.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORT.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPICCAP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGN.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Esl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Athens | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\ONFILTER.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\weather.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341738.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sv.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIconMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Casual.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\RSSFeeds.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\COMPASS.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01569_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Merida | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Triedit\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00466_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZLIB.ACCDE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Uzhgorod | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\crashreporter-override.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ReviewRouting_Review.xsn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\WMPDMC.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Adak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\35.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18213_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14984_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.css.sac_1.3.1.v200903091627.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Microsoft.Synchronization.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ADO210.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-services.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\snmp.acl.template | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sampler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\eBook.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_lv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187851.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceAmharic.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\skins\skin.catalog | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKREQS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Edmonton | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+7 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01246_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143748.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18197_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\profile.jfc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Journal\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Concourse.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Equity.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_shmem.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103812.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASK.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00057_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libttml_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ccme_base.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187859.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe AIR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR45F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR8B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL108.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Mozilla Maintenance Service\logs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\javac.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02092_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\14\Built-In Building Blocks.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\be.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSODCW.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\management\management.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh87 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\mshwgst.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00532_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18223_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MYSL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\SBCGLOBAL.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxmedia.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CURRENCY.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZFORM.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_flyout.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ko.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Blanc-Sablon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libdirectory_demux_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_bullets.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DVDHM.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Faroe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Europe\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\sbdrop.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\setup_wm.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\cpyr.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02252_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\gl.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Almaty | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bishkek | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_win7.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-search.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Glace_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_sun.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Synchronization.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\BIB.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187863.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00127_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\OliveGreen.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-views.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ACCTBOX.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Abidjan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-remote.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\library.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18241_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR3B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\logging.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWCUTCHR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Status Report.fdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21306_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB6.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\weather.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\dcpr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\is\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\jsdbgui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105974.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL044.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\awt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00795_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfoInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01154_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\YST9 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02053J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLNOTER.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIcons.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARBB.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pt_PT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\MSOHEV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15034_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterBold.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\BASMLA.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALSO98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\classlist | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\fi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Reunion | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCDDSUI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR37F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART11.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Maroon.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.lng | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_am.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\86.0.4240.111\86.0.4240.111_chrome_installer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387895.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\DELETE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWRECC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01682_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\LightSpirit.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02407_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_on.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Iqaluit | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\boot.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util-lookup.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annots.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\SpeechEngines\Microsoft\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107026.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-applemenu.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292270.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART1.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBTRAP.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Belgrade | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Chuuk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Metlakatla | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\README.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\oc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02466U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Main.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryResume.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\gimap.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02009_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02424_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01221K.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01293_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18226_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\GRIPMASK.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoAcq.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\km\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099178.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\System\ado\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00351_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ar.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCARD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293238.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Office Word 2003 Look.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libx264_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\policytool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10267_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FORM.JS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\nl.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Niue | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\mobile_equalizer.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_es.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\wsdetect.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105390.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Denver | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Updater.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR43B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\calendars.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\DADSHIRT.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02446_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10337_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECRECL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL078.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Users.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\blank.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\main.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309598.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR43F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0150861.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0233665.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Aqtobe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\vi.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\hrtfs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSPTLS.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Resolute | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\az.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tbilisi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\visualization\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\LAYERS.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\CLNTWRAP.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\43.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232797.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\glib-lite.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\distribute_form.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Class.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Johannesburg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Manaus | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099173.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18256_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME03.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\RM.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginMergeLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ms\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.properties.src | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunjce_provider.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Ndjamena | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00132_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART10.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\SIST02.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\WPGIMP32.FLT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105338.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\net.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287644.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18230_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\flavormap.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\Welcome.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\cli.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216874.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00170_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\security\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00330_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10308_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DOCL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212661.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialMergeLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\buttons.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBlue.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\or\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Training.potx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\vlm_export.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\about.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028191654.pma | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\HST10 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0230876.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR51F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\br.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\en-US\DVDMaker.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Petersburg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\javafx-mx.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\CAPSULES.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14868_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Library\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdarem.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\en-US\msoeres.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02296_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02736U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Pushpin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\splash.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Matamoros | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\DELIMDOS.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\OriginFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7EN.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151581.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\freebl3.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\keytool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-lib-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\servertool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\trusted.libraries | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239943.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-keymap.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Toronto | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\oeimport.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\authplay.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00610_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDCAT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Budapest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Media Player\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02270_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\localizedStrings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\eclipse_update_120.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Yekaterinburg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libanaglyph_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239955.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIcon.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\management\jmxremote.access | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\STRTEDGE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107146.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02106_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\meta\art\01_googleimage.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoDev.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayenne | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\plugin-container.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Help\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\adobepdf.xdc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02754U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178460.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01046J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14594_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia_Banderas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24Images.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKDECS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00191_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Distinctive.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\AMERITECH.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\DEEPBLUE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0282928.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_decreaseindent.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Anadyr | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYBB.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Country.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Antarctica\Mawson | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\WSS_DocLib.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bn_IN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14792_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15023_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BAN98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7EN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382954.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL087.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\rmic.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\defaults\pref\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174315.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196060.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196358.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prcr.x3d | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GR8GALRY.GRA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZMAIN.ACCDE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02055_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePage.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_SlateBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Students.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msxactps.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02748G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\SEAMARBL.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_120.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Stockholm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ko_KR.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-nodes.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\currency.data | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\8.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Routing.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7z.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\bin\server\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Matamoros | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\vdk150.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15156_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR30F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OL.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\wmpshare.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL109.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIconsMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185842.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239967.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Earthy.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Baghdad | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\Media Renderer\avtransport.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107150.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REC.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1036\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\adcjavas.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01069_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\bn.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153313.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\keytool.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\smtp.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105506.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285484.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382931.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\notification_helper.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME-JAVAFX.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153273.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02578_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21322_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XLSLICER.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\ExtExport.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107746.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\librtpvideo_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.rst | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+5 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsMacroTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-api.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\wsgen.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CASHREG.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Defender\en-US\MpAsDesc.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\Maputo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jar.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views_3.7.0.v20140408-0703.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODTXT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301076.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR5B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\STRTEDGE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_el.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153305.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287642.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Fiji | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241781.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00305_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01563_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OFFRHD.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\idlj.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RESUME.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\Common.fxh | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\elevation_service.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Mendoza | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Analysis Services\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\EXITEM.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\New_Salem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\handsafe.reg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Origin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\LASER.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382962.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Krasnoyarsk | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\security\javaws.policy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18199_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-oql.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107130.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232803.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_super.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MORPH9.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGTOC.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tijuana | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Miquelon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00694_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02958_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+11 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\batch_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libuleaddvaudio_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\desktop.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdate.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\jsprofilerui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Urumqi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Media Player\Visualizations\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_chromecast_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02398_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Defender\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\lua\liblua_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\cpu.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\APPTS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\penusa.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02208U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15073_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSVCR71.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\APPT.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewDblClick.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\TableTextServiceAmharic.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\EquityFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zurich | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\twitch.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341439.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0158007.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-heapdump.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\penjpn.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL058.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WITHCOMP.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\jvm.cfg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02405_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPUNCT.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Paramaribo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jhat.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Aqtau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ja\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\iedvtool.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHigh.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBCONV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_hov.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152878.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01368_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Couture.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterToolTemplates.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Bucharest | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\localizedSettings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AXSLE.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157831.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\PAWPRINT.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02441_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00788_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_High.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_sent.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Internet Explorer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBUI6.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL012.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18221_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME55.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSCOL11.PPD | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\msader15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.OPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHSRN.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XMLSDK5.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montreal | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.ths | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\JSProfilerCore.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105250.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105266.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21348_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENV98SP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Vostok | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\MedianFax.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\TECHTOOL.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\SuspendSync.i64 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102762.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0171685.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01777_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help_3.6.0.v20130326-1254.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssLogo.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Elemental.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\http.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ONLINE.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-progress-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.NZ.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\7-Zip\Lang\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\main.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Spelling.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18180_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-utilities.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\default_thumb.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086432.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01843_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18252_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Civic.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUDGESCH.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\sqmapi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-print.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\oledbjvs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Pushpin.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Author2XML.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmpnetwk.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-disable.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageSmall.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.sun.el_2.2.0.v201303151357.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Honolulu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\wmlaunch.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199475.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02950_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02069J.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Hierarchy.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Tucuman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Barbados | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\readme.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\flyout.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Bears.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21309_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR13F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBEMAIL.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+8 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_up.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15277_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_off.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX8.x3d | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe Root Certificate.cer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR42F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA0009.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESTL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\.eclipseproduct | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115867.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down_BIDI.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\GIFIMP32.FLT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386485.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Media.accdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST5EDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107024.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\INLAUNCH.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\settings.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Peacock.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152890.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABMASK.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_vi.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\am.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Bishkek | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02058U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00780L.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL097.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\picturePuzzle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145669.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\SpaceSelector.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Argentina\Cordoba | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00212_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.di_1.4.0.v20140414-1837.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\EET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\en-US\WMPDMC.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00452_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234657.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\trusted.libraries | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238959.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143754.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7cm_fr.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\DESIGNER.ONE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\libxml2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\PipelineSegments.store | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\anevia_streams.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Bears.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\CT_ROOTS.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\ALARM.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SENDTO.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ENVELOPR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Apia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Etc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Identity-V | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ug.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03236_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0148309.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.ssl_1.0.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdadc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14985_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-lib-uihandler.xml_hidden | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\en-US\ieinstal.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199429.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145904.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0233018.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14710_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-text.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libmpg123_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\msinfo32.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105710.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ASCIIENG.LNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh87 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\VSTAProject.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10358_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\ehshellLogo.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)alertIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199423.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR15F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-11 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEEXCH.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02439_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODBC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\86.0.4240.111\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382942.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382969.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\playlist\liveleak.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Campo_Grande | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yerevan | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\libEGL.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0283209.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado28.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lindeman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ia\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\ReadOutLoud.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152882.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386267.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Monrovia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01241_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15134_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ONBttnPPT.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BS53BOXS.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bn\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21338_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\BCSAddin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_VelvetRose.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\cpu.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Brussels | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-snaptracer.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195260.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\RELAY.CER | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\validation.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Text.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\favicon.ico | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\images\Video-48.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\ANALYS32.XLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\artifacts.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00444_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Pontianak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\preloaded_data.pb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jsdt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadomd.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\gstreamer-lite.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185806.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00494_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\BHOINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL095.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\38.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaremr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0250997.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05710_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR2B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\README-JDK.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OEMPRINT.CAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTITS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\dnsns.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00438_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\IPEDINTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR20F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\30.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pitcairn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\omni.ja | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\RMNSQUE.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\BUTTON.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\precomplete | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\IEAWSDC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\release | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\WMPNSSUI.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-snaptracer.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLPROXY.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ca.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0284916.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\Filters.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodbig.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.DLL.IDX_DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01607U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03379I.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMIMES.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\settings.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jrunscript.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\klist.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\VGX\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Cayman | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-4.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00687_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\uninstall.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107288.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21335_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\BREAK.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1036\MSGR3FR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jmx.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\WebKit.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198377.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00110_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Oral | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\management-agent.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103262.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DigitalInk.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\xjc.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\xul.dll.sig | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Internet Explorer\ie9props.propdesc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107484.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00011_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImages.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chihuahua | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Marengo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18231_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\ContactPicker.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\PublicFunctions.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.TW.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-coredump.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297759.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VGX\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\msdatasrc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kabul | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\JPEGIM32.FLT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341634.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03425I.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299611.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tirane | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Waveform.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santarem | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-6 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Media Player\en-US\wmlaunch.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\directshowtap.ax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\MSMAPI\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\WT61ES.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\DirectDB.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-threaddump.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\settings.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Apothecary.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DissolveAnother.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSORES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178932.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00402_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierUpArrow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libscte18_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-tools.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\ktab.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Hermosillo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\30.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02009_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.policy | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_globalstyle.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\London | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLFLTR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\adovbs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14831_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21422_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185796.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02040U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\atl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152708.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\CHICAGO.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4ADT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBARV.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MARQUEE.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveMergeLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\flight_recorder.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Macau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341455.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_rainy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_windy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Noronha | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\VisioCustom.propdesc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libcaf_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Stars.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Efate | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdaer.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00932_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00834_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-3.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00299_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Thatch.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\South_Georgia | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\clock.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090087.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105292.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239079.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18239_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS000A.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\PACBELL.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryMergeLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00486_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\IRIS.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\adcvbs.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Indian\Christmas | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02169_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\de.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02039U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152432.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\5.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPFT632.CNV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232393.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceme35.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Iqaluit | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099197.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN01164_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Teal.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mset7.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWLAY32.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked-loading.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mouseout.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR4F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\currency.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\PST8 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153508.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153518.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Urban.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_GreenTea.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR19F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-favorites.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\GKWord.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\instrument.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\mozavcodec.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00118_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00681_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00479_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-heapwalker.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Apex.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\jli.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01296_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\NETWORK.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090149.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MUAUTH.CAB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR30B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\VelvetRose.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-modules.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macGrey.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-core-kit.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Regina | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341447.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cambridge_Bay | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_h.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\javaw.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\browser\features\[email protected] | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\msoe.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0172193.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103850.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174952.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceer35EN.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Pacific\Tongatapu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212953.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE06049_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMSS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN020.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\create_stream.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\offset_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\misc\libstats_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\System\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00235_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Sakhalin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\hxdsui.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\AXIS.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME25.CSS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152694.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR28B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Country.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7EN.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\DADSHIRT.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\splashscreen.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222015.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\ZoneInfoMappings | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Moncton | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199307.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02134_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\triangle.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\WANS.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\INFOML.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\CHEVRON.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\pdmproxy100.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\MCABOUT.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02957_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00255_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10302_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Helsinki | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKACCS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Casual.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\modules\host.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216540.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_on.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-4 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\lg\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21305_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ReviewRouting_Init.xsn | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\New_Skins.url | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01304G.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Pushpin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT+12 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\NOTICE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\wlsrvc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384888.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR44B.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\46.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Chisinau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui_2.3.0.v20140404-1657.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18202_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115863.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\w2k_lsa_auth.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281008.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Mozilla Maintenance Service\updater.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianResume.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00234_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\control\libntservice_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Media Player\WMPDMC.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0286068.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\DESKSAM.SAM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\validation.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_hover.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\lt.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AGMGPUOptIn.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTS.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupiconsmask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-ui.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\sunec.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02757U.BMP | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00712_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadox.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183574.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR25F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIconMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Nipigon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvm.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\cmm\CIEXYZ.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\HST | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\pencht.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105272.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02116_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Maroon.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREETING.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Urban.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\alert_obj.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked-loading.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-previous-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_bezel.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\La_Paz | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodicon.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187895.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mahe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Volgograd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\settings.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\44.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\th\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR16F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_few-showers.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPFT532.CNV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281632.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\MST7MDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libvnc_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00720_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kamchatka | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\skins\winamp2.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\attention.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Defender\MsMpLics.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui_4.0.100.v20140401-0608.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mk.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\MakeAccessible.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInTray.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145361.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02369_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SAVE.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Mail\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\COPYING.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\LEVEL.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Elemental.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299587.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LETTHEAD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\RSSFeeds.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.analysis_3.5.0.v20120725-1805.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143749.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCVDTUI.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jstatd.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_COL.HXC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Class.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiItalic.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.runtime_0.10.0.v201209301036.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\en-US\Journal.exe.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\en-US\MSPVWCTL.DLL.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Full\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287408.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00197_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15022_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHLEX.DAT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImageMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DigSig.api | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01875_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293570.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR1F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Zurich | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00673L.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Perspective.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-2 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Gambier | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-settings.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POST98SP.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\ink\skchobj.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Jakarta | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02024_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03257_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SPACER.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Journal\en-US\NBMapTIP.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sa.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\javafx-font.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKREQL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_pressed.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuala_Lumpur | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Africa\El_Aaiun | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ms.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281640.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REMOTES.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OUTLMIME.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ja.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.ui_1.1.200.v20130626-2037.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\St_Johns | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02790_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Dubai | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.HXS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_left.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Peacock.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_spellcheck.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench_3.106.1.v20140827-1737.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Lisbon | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\it.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLV.XLS | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\console_view.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\cmm\LINEAR_RGB.pf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199727.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\NOTES.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialReport.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup-impl.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Etc\GMT-3 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\METCONV.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Author2String.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0290548.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02450_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297707.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Mail\WinMail.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\docs.crx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-core.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\WindowsPowerShell\Configuration\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14882_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\si.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241037.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02617_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293828.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AU.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCHUR98.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieMergeLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)redStateIcon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\THMBNAIL.PNG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Marengo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\ach\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\9.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_over.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\2.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\cryptocme2.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_et.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199483.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_s.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ko.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\9.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178348.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_issue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\sqloledb.rll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105230.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0172067.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\pop3.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_hyperlink.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBPQT.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RESEND.CFG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107262.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Stationery\1033\PAWPRINT.HTM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nome | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\EXPTOOWS.XLA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLMAILR.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_rest.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\BIBUtils.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02451_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01238_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dubai | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-output2.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-core_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office14\NAMEEXT.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382966.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01354_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Portable Devices\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfxrt.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\jre\lib\applet\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS9CRNRH.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\.lastModified | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-utilities.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jre7\lib\zi\Asia\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msadcs.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099169.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0337280.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\COUPLER.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099184.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\REFINED.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086384.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe AIR\sentinel | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02227_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\LightSpirit.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeLinguistic.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VBA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieLetter.dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCAL.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\F12.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_right.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199303.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\handler.reg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7ES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\instrument.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_orange.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02265_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-TW.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_partly-cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00783_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\STUBBY2.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\SUCTION.WAV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSIDEBR.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsVersion1Warning.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21296_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImage.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\license.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di_1.0.0.v20140328-2112.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tashkent | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-ui.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0292982.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLTASK.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.Infopath.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation_1.2.100.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7fr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Garden.htm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186362.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18209_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SEARCH.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\RSSFeeds.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-modules_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Background_Loading.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174639.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0175361.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-spi-actions.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\mscss7cm_es.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\WaitUnlock.docm | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0168644.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-5 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14869_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00018_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00833_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR11F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rainy_River | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked-loading.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OOFL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB5A.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Sync Framework\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityMergeLetter.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\ssv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\blacklist | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-GB.pak | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-heapdump.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\background.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN058.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\DiagnosticsHub_is.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15170_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\WET | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\TAB_ON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\BTINTERNET.NET.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssv.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado25.tlb | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\setup.ini | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00017_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299171.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SlateBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Portable Devices\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\msdfmap.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\ACTIVITL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\logging.properties | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\slideshow_glass_frame.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.dub | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7-zip32.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\java_crw_demo.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212751.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Median.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityReport.Dotx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\es.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\jfr\default.jfc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\ado\adojavas.inc | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152622.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\utilityfunctions.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-progress.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216858.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\XLSTART\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_top.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00411_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02074_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_disabled.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_foggy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jmap.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBLR6.CHM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200279.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\TAB_OFF.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLNOTE.FAE | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PTXT9.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\keystore\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Buenos_Aires | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Halifax | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\plugins\misc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\16.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.bat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106146.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\xlsrvintl.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCINFO.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Kathmandu | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libremap_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\ZX______.PFB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0332268.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS10TARG.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Panama | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Macau | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\UmOutlookStrings.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\include\win32\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107134.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterNotificationDescriptors.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerEvaluators.exsd | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Eula.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageSmall.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\1px.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01770_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Dublin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Europe\Andorra | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\RTF_BOLD.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\NL7Data0011.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\SCNPST64.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceca35.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSIDEBRV.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vienna | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105588.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_TexturedBlue.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN111.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Inuvik | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyrun.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\bin\npt.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSTORY.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can03.ths | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_hr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151063.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\OMML2MML.XSL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Manila | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.jrockit.mc.rcp.product_root_5.5.0.165303 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\deploy\splash.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Australia\Sydney | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_en-GB.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\javafx-iio.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Garden.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\msdaosp.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_italic.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DATETIME.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB1A.BDR | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sa.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216600.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\32.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\ECLIPSE.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Trek.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\8.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\bin\jstat.exe | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-visual.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-templates.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-docked.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_over.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\Ole DB\sqlxmlx.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CDLMSO.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLow.jpg | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplateRTL.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\wlsrvc.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239063.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-actions.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiItalic.ttf | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00670_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\leftnav.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\PREVIEW.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00417_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\OliveGreen.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.console_1.1.0.v20140131-1639.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\BLENDS.INF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCHUR11.POC | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewFrame.html | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Windows Photo Viewer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado15.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\stop_collection_data.gif | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\Help\Keywords.HxK | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152606.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00217_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143744.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\Indiana\Indianapolis | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\bin\wsdetect.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AppConfigurationInternal.zip | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_snow.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\jfluid-server_ja.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-coredump.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185780.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\19.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Kuala_Lumpur | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_tr.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292278.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\BUTTON.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\library.js | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Sakhalin | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\lua\intf\telnet.luac | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\gadget.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5EDT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00350_.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvm.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\CANYON.ELM | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Document Themes 14\Slipstream.thmx | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\TRANSMGR.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Customer Support.fdt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImagesMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Visual Studio 8\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-compat.xml | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\SystemV\MST7 | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105504.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105600.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222021.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_cloudy.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\America\El_Salvador | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\add_down.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\uz.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Cairo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\ext\jaccess.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Mozilla Firefox\gmp-clearkey\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_On.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\WT61FR.LEX | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107526.WMF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBAR.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\0.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL002.XML | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre7\lib\zi\Asia\Kolkata | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\icon.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKL.ICO | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_m.png | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382925.JPG | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR35F.GIF | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\MSWORD.OLB | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\VideoLAN\VLC\lua\http\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files\VideoLAN\VLC\plugins\codec\libstl_plugin.dll | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcor.dll.mui | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBORDER.DPV | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Office14\TWCUTLIN.DLL | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
| File created | C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU | C:\Windows\explorer.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU | C:\Windows\explorer.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_Classes\Local Settings | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU | C:\Windows\explorer.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_Classes\Local Settings | C:\Windows\explorer.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_Classes\Local Settings | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell | C:\Windows\explorer.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell | C:\Windows\explorer.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff | C:\Windows\explorer.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots | C:\Windows\explorer.exe | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\explorer.exe | N/A |
Suspicious behavior: RenamesItself
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\1076028349.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: 33 | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: 33 | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\explorer.exe | N/A |
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\a.exe
"C:\Users\Admin\AppData\Local\Temp\a.exe"
C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /c start C:\Users\Admin\AppData\Local\Temp\10387.jpg
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}
C:\Users\Admin\AppData\Local\Temp\35045.exe
C:\Users\Admin\AppData\Local\Temp\35045.exe
C:\120162634617678\winsvcs.exe
C:\120162634617678\winsvcs.exe
C:\Users\Admin\AppData\Local\Temp\1076028349.exe
C:\Users\Admin\AppData\Local\Temp\1076028349.exe
C:\Windows\explorer.exe
explorer.exe
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4f8
C:\Windows\explorer.exe
explorer.exe
C:\Windows\explorer.exe
explorer.exe
Network
| Country | Destination | Domain | Proto |
| N/A | 8.8.8.8:53 | trik.ws | udp |
| N/A | 217.8.117.10:8080 | trik.ws | tcp |
| N/A | 217.8.117.10:8080 | trik.ws | tcp |
| N/A | 217.8.117.10:8080 | trik.ws | tcp |
| N/A | 8.8.8.8:53 | 304049943.ws | udp |
| N/A | 64.70.19.203:8080 | 304049943.ws | tcp |
Files
memory/1584-0-0x000007FEF6930000-0x000007FEF6BAA000-memory.dmp
memory/1808-1-0x0000000000000000-mapping.dmp
\Users\Admin\AppData\Local\Temp\35045.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
memory/1108-3-0x0000000000000000-mapping.dmp
C:\Users\Admin\AppData\Local\Temp\35045.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
C:\Users\Admin\AppData\Local\Temp\10387.jpg
| MD5 | a603d35899017876f5cbea46dbf223d4 |
| SHA1 | bbe3b9dc5ca78b399ae151afc0f03972e710b23b |
| SHA256 | 2fbfd083e8286b5715afc2b0f0b84dc11d211e18a4bdd3f9b4af6d5a2e833ab4 |
| SHA512 | 14100ee11d31da7dc051600c66e175569ad6026a550fa1167e5ecffee0f84bd6487b65eec45e32ac2e2b9b5bc338a952657187945bab7530896294d6e4cbc78f |
C:\Users\Admin\AppData\Local\Temp\35045.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
\120162634617678\winsvcs.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
memory/952-8-0x0000000000000000-mapping.dmp
C:\120162634617678\winsvcs.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
C:\120162634617678\winsvcs.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
\Users\Admin\AppData\Local\Temp\1076028349.exe
| MD5 | 7d52884b375ce8b6182f1c53f0f1c496 |
| SHA1 | 6b70e90b0dada8d93c61caa678e76ce2abcbc76b |
| SHA256 | 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021 |
| SHA512 | 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515 |
\Users\Admin\AppData\Local\Temp\1076028349.exe
| MD5 | 7d52884b375ce8b6182f1c53f0f1c496 |
| SHA1 | 6b70e90b0dada8d93c61caa678e76ce2abcbc76b |
| SHA256 | 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021 |
| SHA512 | 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515 |
C:\Users\Admin\AppData\Local\Temp\1076028349.exe
| MD5 | 7d52884b375ce8b6182f1c53f0f1c496 |
| SHA1 | 6b70e90b0dada8d93c61caa678e76ce2abcbc76b |
| SHA256 | 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021 |
| SHA512 | 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515 |
memory/1212-13-0x0000000000000000-mapping.dmp
\120162634617678\winsvcs.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
\120162634617678\winsvcs.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
memory/1904-18-0x0000000003B50000-0x0000000003B51000-memory.dmp
memory/1308-19-0x0000000003780000-0x0000000003781000-memory.dmp
\??\M:\$RECYCLE.BIN\S-1-5-21-3825035466-2522850611-591511364-1000\desktop.ini
| MD5 | a526b9e7c716b3489d8cc062fbce4005 |
| SHA1 | 2df502a944ff721241be20a9e449d2acd07e0312 |
| SHA256 | e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066 |
| SHA512 | d83d4c656c96c3d1809ad06ce78fa09a77781461c99109e4b81d1a186fc533a7e72d65a4cb7edf689eeccda8f687a13d3276f1111a1e72f7c3cd92a49bce0f88 |
memory/1308-23-0x0000000003780000-0x0000000003781000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\1076028349.exe
| MD5 | 7d52884b375ce8b6182f1c53f0f1c496 |
| SHA1 | 6b70e90b0dada8d93c61caa678e76ce2abcbc76b |
| SHA256 | 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021 |
| SHA512 | 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515 |
memory/1576-26-0x0000000003F90000-0x0000000003F91000-memory.dmp
C:\Users\Public\Desktop\Adobe Reader 9.lnk.ReadMe
| MD5 | a3550476acc0f779a0ce244696153cfe |
| SHA1 | 0416bdc409bab7d6852513e7ccfc856d695949c2 |
| SHA256 | 13272ad3279cd3f780822144b2c19703f0c81ab6a3a37278622365fc37ad4c12 |
| SHA512 | 82c1d454a49857622aa746e57900e00303b1576f181b8d565efb3fa572c3be19416b33530a3edc8c004ac7800475f353a39665d31180cf8e7f84d721d74ed31a |
C:\Users\Admin\Desktop\UnlockBlock.avi.ReadMe
| MD5 | 59003ae0fcc13a60b8cebd16a3ea148b |
| SHA1 | f681185ed5846458b99133f33fee5b52995c0bf0 |
| SHA256 | f6b5619eb4d37bd67d9b5cd92ccc8086d302a1682431d00161cc1500065e063a |
| SHA512 | 1d5a9ffc0865c3bd7715dfbd3497e81d9ded298b1f6748015e0551dea84f94579cc41fd1e2e18a357405975759578958aac319bf960be1cb509b007158c2ff49 |
C:\Users\Admin\Desktop\UnblockSet.au.ReadMe
| MD5 | 810168777439cdce8d2ad5f062add3d5 |
| SHA1 | 7293fe247477f6a57c9c67313e1dc90da85e7ea4 |
| SHA256 | 724e98b2c238728e3d000e10d1603586bf4dc794b1e6b23f37346cde7a10c4a4 |
| SHA512 | 7db56754421c67d761c0df8bf97c91e90e898ca4839af34d9ab21533069114e150c91e63d74e37267b34e1950f0dce38d92c48a3f31f8e00777e3434c73cd936 |
C:\Users\Admin\Desktop\UninstallRestore.m1v.ReadMe
| MD5 | 887d12f451b8d009a2aae83441db2a13 |
| SHA1 | d013478b1b6ab199844198558c406fcee26b4897 |
| SHA256 | 2e5f0792cef3b63756e156a1ffe47530d2f7896810a6302b1de4bdf7b641c363 |
| SHA512 | e4d4f36a1400ffc95bab08cfa53ad582d19c15d3def5ac9fdf585b80a10173b2ad44f13aedf2b2620c729cff629cee9ac650fbb2d86287de7e1189f70bc15057 |
C:\Users\Admin\Desktop\UnblockConvertFrom.DVR.ReadMe
| MD5 | 5af5fbdd12247711c38ec24855a69a29 |
| SHA1 | 850ad20f05ad49c3748fd959ca6609af3dde81ec |
| SHA256 | 5dae066c54cb3aade0e881136ef61c8721758589a34920df6028b40f17b0d222 |
| SHA512 | 33f41bede523814159ee80b6b3a084b29ab20cf81ddd3e9510c8854c206c9deb841f5eb27667485f92e3c9948be5fb92506c747222918cd924413e3dc89a77e2 |
C:\Users\Public\Desktop\desktop.ini.ReadMe
| MD5 | fa77527ddc2adeb6a62271deb84e19a0 |
| SHA1 | 3ee5ebfef7efda26f9734bfaaff51957f7700527 |
| SHA256 | 6774a61775a0f1a9b972e63b4f7064a3160a89b182d0bf76a9882d8f56ff43de |
| SHA512 | 364c5ccb0ad00bb6ca9762d82819a2297503468e08308660e65b3c3960ff52368dca3eeab7de7114cc88aae0511d3d9e5b587620fca4591a4ed638996459e468 |
C:\Users\Public\Desktop\Firefox.lnk.ReadMe
| MD5 | a06f723c0eb928b58516dd8aebf38b89 |
| SHA1 | e72cd54944f5d7b8452fff7cff19a5b1264deec2 |
| SHA256 | f43cc862930cfa25595c24301b752e04e371cfa2bc49026a968df5f96a51417f |
| SHA512 | 4b6f17277fa3936d471397464858b60b298fe3442cf2a93bfffd266bd2282c799f81824928a4e2cf73fec985766622a71fd2a3d27edc9cf3d26f4a3ad29938ee |
C:\Users\Admin\Desktop\SyncJoin.iso.ReadMe
| MD5 | bdc95ff91a66d1634d46278e107e0951 |
| SHA1 | 739f790453ee2d8b915a526b8c15cfc36943fd28 |
| SHA256 | 57eab59cd0a442b273c8e58decd37551d752da4dec2ddb6fff3ea9de7fe0477c |
| SHA512 | 8ed87d1c503b109376d0131dfb6baccbd2c8c9df5c2c3b7bc40ae73562839e8ec6f5e225d225de22df01aef1561fcd44226a3aa2d6732d79d3ff82c4834e733d |
C:\Users\Admin\Desktop\Read_Me.txt
| MD5 | fbb87717e779a76e3489302ad9db6e6b |
| SHA1 | b2308a9cb9a4d35e7ad19c49adc4a56e18372d7d |
| SHA256 | db339060d0450f78a6e28d89690bb235e36c26eeab2f16887a23dea19b8499fc |
| SHA512 | 12e7d898dddc449a0c06a7d8d5c443742117b2e432ee46c805d5e852d67d34bc018e27b0d9e91b1de1759fa26328c18f5fa6a1a1239f23193cbc81a554547b31 |
C:\Users\Admin\Desktop\PushSend.mpg.ReadMe
| MD5 | 8e7953a56028808845e9e4f8cd9802fe |
| SHA1 | 97ccf470fbef92a8fdbfca047fa006d4f7240bc5 |
| SHA256 | 3d03ca8bbd1a4a74ac140c9f91728e08400a4db24d8019eb13f4db9f452cb710 |
| SHA512 | 38c256a2ae26b2bb8e746f816b1814097f88f6dc0405140108e402a51ee9c49269ecd2aed9fa939927a2ccfd217d4e4abad751ed8360bcdadc2c3e91cb668323 |
C:\Users\Admin\Desktop\NewProtect.csv.ReadMe
| MD5 | 47a71203f04cdebb53dbc7c79168e8ad |
| SHA1 | 74004cc491514a9c20ae0a3e78c31a317604a637 |
| SHA256 | 7e57027ee36ae2dadf83e16b9e7b7bd4803a5c075fc9807238eeb32391a16d01 |
| SHA512 | 5880ae2f320a5b7522a68b427949c072ed91129903bab01c23791b1a81875c559312985490e5089018d3d13ad61f411f8a5537321aee2460e8c5369e9266c2ff |
C:\Users\Admin\Desktop\NewEnable.au.ReadMe
| MD5 | 9f3c01a45bfa8bc89958cf2f0a420977 |
| SHA1 | df28a220f15f1f5febbde4cdae8c3b44e163c33c |
| SHA256 | 8fde1359b41f1ec8030cf751836eed89d318a778fd41e8f2754276520a5c8aa7 |
| SHA512 | 39fff1d5113ee8ba34c807df9f598460cca660aba2637df64a1265f3351d25c69fa4ef2f1277b14de005c9fff22e30664d0a54a09bfee50144901561c6fc437f |
C:\Users\Admin\Desktop\GrantUndo.iso.ReadMe
| MD5 | c7a415b8caf73fb7cae792afdb33f0a5 |
| SHA1 | 889e61e720ee9c39ae309324462efb3d3de22176 |
| SHA256 | 42d184b1df44c3990bca6699b3a281019b1d327999c8db3e10135be3b3f684dc |
| SHA512 | fe903fe04c9fb8ff472a825faa12137fafcf0bca01f090f74abab53b07c9ebe597398e077290b44d76882cf016bf47d10f18021a8d5d6f13249ded265e775b2d |
C:\Users\Admin\Desktop\GrantDeny.rm.ReadMe
| MD5 | 5fcabf3ac1828800b05180d5353aa400 |
| SHA1 | 42fa51b2c02d2b3a285804078451f643526de492 |
| SHA256 | 8a11e30faa4345812faea782dcce70f8b2745ab29f593589b4b341718f34b083 |
| SHA512 | fd1c486b53feb520f0a90f9cc248cd77f428c66d4692f26947276efbed81d1df6cb2d0498e4cbee92cbbf70a5dc2d7488a4a32aca77a33e5d8c637185317b808 |
C:\Users\Admin\Desktop\DenyConnect.tif.ReadMe
| MD5 | 6a4abe0332ebf650ff085c538f9d9700 |
| SHA1 | d601872904aed6a24bcfc3e516ff338eca1243f2 |
| SHA256 | 426053e5104bb873e408ea9a49ee0161ee4c8516b3309c3a13faf5a104142fc7 |
| SHA512 | 84e7e1fd24a6c38a84228d1ab86bed17a2dc48c4950d5f2e93c06cfdbfd6f381c72c20a96923e3ccc0eb41497715383e01d5bd7a2fba2de7ca39f19a60eea7bc |
C:\Users\Admin\Desktop\CopyExit.vssx.ReadMe
| MD5 | a7b2a845af1dea59feaa2b50ac2a46e9 |
| SHA1 | b5da9b555819608e9a791c7d0c58b40c8d0a1ee7 |
| SHA256 | 6d048aa133c088f5f1dac2a40d33fa7335e6c34c0eaa26c373c5dbc5922e70a2 |
| SHA512 | 3880e68c42b85f8661b9a07a5aead6579e513979fd8e54773fe5fa876c69fae657d2260836d508b5fbcc5b1ad06c56a9d0e087abe168b2fb988e42f6d86e97ff |
C:\Users\Admin\Desktop\CopySplit.AAC.ReadMe
| MD5 | 7e32231998f14b46507c0980d39f1cc5 |
| SHA1 | 83166382194a0e407a8ca10ea23644d3790cc7af |
| SHA256 | 5f64a18ef5e77ed612c847f184c88d6f17adc44ee91b45c33ccadf3f56a83b87 |
| SHA512 | f9747ffa956205be6fcd613d61fdb97a8637c6e93b5a23963881de21109ed22dc91683e86ec88d87416a1544bf1d4998dfbd5cd25c6683ccdb6f00b5148112ee |
C:\Users\Admin\Desktop\DenyConnect.3g2.ReadMe
| MD5 | 8007cf737a927fba8f36677c1ce31af2 |
| SHA1 | 6eb7790a356270c4f2a4a8826baf260a7a5cef80 |
| SHA256 | afe7055f8bc13eec31e0d4a93ce1dbabbec306701d2db4716e07ee951880a312 |
| SHA512 | 506a23ecee8d5211bdec87f01a014622d2919fd1dc58649e1c8e9996cc7685a7f18e1feda4ed01a31cf2ff4f64f4f6fb504f79416b3c9a94154c0cae42d34163 |
C:\Users\Admin\Desktop\desktop.ini.ReadMe
| MD5 | ac712555d33fc0912c21a4446a40e93c |
| SHA1 | c571d7b5e1ea5ad34e714dff4be82b119b1e09ff |
| SHA256 | 264273125083adb014e33eda30bfd7696bc26d074c93b4cf49f19c020bef1a6a |
| SHA512 | b0b669b58a4a0a352c278b43159336cd05ac278746ff4fb1128a2f730684b8c1f1e3334132da077554adc31f9cdb515dfcb5a6dfc81acb8cb319eac0cbb23ffd |
C:\Users\Admin\Desktop\LimitBackup.ogg.ReadMe
| MD5 | 379c13620e86bfb29189e3a7a4bc6660 |
| SHA1 | 4983d75ade8744ff8111093f14b8335e074e6575 |
| SHA256 | 3b2c0a3a888816362e4477b9b2046a8e099d49169e5292f34423be1b75ff3f32 |
| SHA512 | c74e1e1b0c060dfb05cd203ea18c448a7df036536a3bf6998e4b6b68cbe68b6487c9848eaa0460dd613a1dec512e926299cc8ce7df3a27d15d8df39040448bc7 |
C:\Users\Admin\Desktop\PublishJoin.aifc.ReadMe
| MD5 | ef7e03f4fac10131e97ca31d48d2e17b |
| SHA1 | 66daad09744448ce3f8f20a373d37773476e45b5 |
| SHA256 | df729413aa9579850d436f5271f1108e23acce068773ea7533555e5ba306cdd4 |
| SHA512 | c49563f139015c74f8b3b3a5cbd750bdcfb747295c520ecd5a414a35c3365fe22746ab93e753f99465a9c260e6dc259050cbf4d8dde7a099925bca73a195a42b |
C:\Users\Admin\Desktop\TraceUnregister.wmf.ReadMe
| MD5 | 0c48e22c7f8ffa6b8cf1008cbdf6262d |
| SHA1 | 639b302b7e68de0e64101cc1e0c1ae012279bd46 |
| SHA256 | fc4621c022750827abe7fecafde11feca6d556a6230a305a931612ff01e3a774 |
| SHA512 | fb288793e9275d32771b18a8076b58fc109c5336706808d2e8bb092b0137b658f2297f97c174dda1bda283c73505f96a9ea96b279896d5d0d8658a7c09e1287e |
C:\Users\Public\Desktop\Google Chrome.lnk.ReadMe
| MD5 | 764cc03a40deff4cb5b6f6f359b07df5 |
| SHA1 | 2012857fe9f0b635e1cac2d5a480659a2353c0f2 |
| SHA256 | 9d84579c78070fbfa6f668177fc9474e26106bc4ccd6f357daf086e1504e0933 |
| SHA512 | 1c2daa5e84817f8a0f0e05ce5ba89c7f8a25c65572216a8b1534335595581e23ee039f067671e8c7e9897bd750a6e78e859c95623955a0fe58cfac9d067ee48f |
C:\Users\Public\Desktop\Read_Me.txt
| MD5 | fbb87717e779a76e3489302ad9db6e6b |
| SHA1 | b2308a9cb9a4d35e7ad19c49adc4a56e18372d7d |
| SHA256 | db339060d0450f78a6e28d89690bb235e36c26eeab2f16887a23dea19b8499fc |
| SHA512 | 12e7d898dddc449a0c06a7d8d5c443742117b2e432ee46c805d5e852d67d34bc018e27b0d9e91b1de1759fa26328c18f5fa6a1a1239f23193cbc81a554547b31 |
C:\Users\Admin\Desktop\AssertConfirm.MTS.ReadMe
| MD5 | 600eca07335ec17931337d14b1dc1de3 |
| SHA1 | 5776139ef2281e8958ee38e8d8b7083c5982dcc9 |
| SHA256 | 46f297b7e225ab5402229f9553e906857576b64b2fb3097d3ec1499ad2adf2b2 |
| SHA512 | 4dc8b0f9bdbe6e0b8006226075a41c0cb25980eb434b8a1123be778dae31ad69558081646bcde60cdb34a92f7e48b2ebd7c1e949c9ad0ed666da94f1ad7252f9 |
C:\Users\Admin\Desktop\CloseAdd.tmp.ReadMe
| MD5 | c234e1edb67f7f3fcc633d7eae0bada9 |
| SHA1 | 9b17edbff27c2f7117d56c7a8ec4eb8dd9182c7c |
| SHA256 | 20b1442263caf8572ccf3b849b66667362063507ee321ab751a155d084404e57 |
| SHA512 | 7c19bbcb7f6722def19c363deb7d6b3c3ffc9fab72904564fdc589ce9fd1b51b1bad0b891cd2a8eedbab2c14e743b50b1711f6e7ae62060883f8e9d77f4635cd |
C:\Users\Admin\Desktop\CompareClose.m4a.ReadMe
| MD5 | f92871653fc2431cc3b67036049eed95 |
| SHA1 | 18eb71a8bbfa3938e2d5824a5bcef458e7449671 |
| SHA256 | 4759d24600523dc9cd66e53a778c0b9a39a433482e0ccf03dab4ac1d31cba505 |
| SHA512 | 8554468f0c60016ae6a47ed3674b3936985d60c81c70dda57f939efd0c9bc28b20dba690f4272e85034b499de2578aa4667ae8986d7cc2702d927d970b4a420b |
C:\Users\Admin\Desktop\CompareResize.wav.ReadMe
| MD5 | 6b2ac0cd6ae7a7a5278a4015bd6526e8 |
| SHA1 | f4c2a032fdaebe89f3be623e0190417656b6b67f |
| SHA256 | 0006f827a3356afbb0529b302ca2e38f1173b10388c7af01df20d6076f8fac28 |
| SHA512 | 0d26a73366f8e8a5547e6a740102d34513a5c1fceeaaf3cbed1931d22a78616b616f59ca66ba0711d4119784ebbbfe4ccc4b90bda5658b062cf52dd6549c482c |
C:\Users\Admin\Desktop\CompressSubmit.wmf.ReadMe
| MD5 | 63f99d34c5e915e7afa568fc192952ec |
| SHA1 | 5af687a71552406f56a089ca77e098a3b1c5fd13 |
| SHA256 | 5f168c1fd40206863a92551c2a62f77a59d8bd1b840f14fd67bd28057f5a105c |
| SHA512 | 45e8e5cdcb7120545d5eb66db1c8386b6990ef546f511e001881a716b69861c17a5ed72e2a463ed510bc8968b102cb26e92137eb0e06d5ca2d7a1f15429275bd |
C:\Users\Admin\Desktop\ConvertFromClear.rm.ReadMe
| MD5 | 44aea17eb2f5b7b5856e34147e8549ba |
| SHA1 | 6d04f9366fe9b9acc45c80b91136f07ebdf76cc4 |
| SHA256 | 3cd17d804be4cb9af510f4bd022734da37752578b7343dd549d3306dba885560 |
| SHA512 | 7ef177d2b39b65da847c0ca61b714fa03309d6d198b3186de831aef3a713490920df9bf84f0ce65ce7471cf63b19dab40b6173d36948b518497081df0456039b |
C:\Users\Public\Desktop\VLC media player.lnk.ReadMe
| MD5 | 357d78e5f61132d504a566d3db10a97c |
| SHA1 | 152cdb8d3e481f2ea2bd651a9b3c444af6a02d83 |
| SHA256 | 17ed82122063edca81dfe32a65ab6ba066de9476a824f1deffc231d6591fecd5 |
| SHA512 | 28346c03184899d8006aebbfd75e7077765702285b416d9e37f375dfa7ac8b075d061fe23c97bfd875f28d0bb9eec656e4752351b9b6804adb3ff4d84971fbbc |
C:\Users\Admin\AppData\Local\Temp\WPDNSE\Read_Me.txt
| MD5 | fbb87717e779a76e3489302ad9db6e6b |
| SHA1 | b2308a9cb9a4d35e7ad19c49adc4a56e18372d7d |
| SHA256 | db339060d0450f78a6e28d89690bb235e36c26eeab2f16887a23dea19b8499fc |
| SHA512 | 12e7d898dddc449a0c06a7d8d5c443742117b2e432ee46c805d5e852d67d34bc018e27b0d9e91b1de1759fa26328c18f5fa6a1a1239f23193cbc81a554547b31 |
memory/1576-59-0x0000000003F90000-0x0000000003F91000-memory.dmp
Analysis: behavioral2
Detonation Overview
Submitted
2020-11-05 20:58
Reported
2020-11-05 22:28
Platform
win10v20201028
Max time kernel
52s
Max time network
123s
Command Line
Signatures
Phorphiex Worm
Windows security bypass
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\10128.exe | N/A |
| N/A | N/A | C:\20172306425313\winsvcs.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
Windows security modification
| Description | Indicator | Process | Target |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1" | C:\20172306425313\winsvcs.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1" | C:\20172306425313\winsvcs.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1" | C:\20172306425313\winsvcs.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1" | C:\20172306425313\winsvcs.exe | N/A |
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\20172306425313\\winsvcs.exe" | C:\Users\Admin\AppData\Local\Temp\10128.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-3341490333-719741536-2920803124-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\20172306425313\\winsvcs.exe" | C:\Users\Admin\AppData\Local\Temp\10128.exe | N/A |
Drops desktop.ini file(s)
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\desktop.ini | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
Enumerates connected drives
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.data\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.workbench_3.106.1.v20140827-1737.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.DOC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.OleDbProvider.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\tpcps.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pl.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\wxpr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcr120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial1-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\3RDPARTY | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-templates.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_f14\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\ClientEventLogMessages.man | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javah.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-startup.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.ReportDesign.Forms.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ga.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Grayscale.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8.mp4 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\PROOF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\tzdb.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Garden.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\jfr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial1-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WWINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mr.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_win.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVManifest.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntime2019R_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\pt-BR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\th-TH\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\blacklisted.certs | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\BORDERS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\time-span-16.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\IGX.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\eu.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\javacpl.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WacLangPackEula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\cy.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\javacpl.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-xstate-l2-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-process-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\OMICAUTINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\launcher.win32.win32.x86_64.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\policytool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.BackEnd.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadce.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs-nio2.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-snaptracer.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_es.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\rjmx.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONGRAPHICS.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7cm_es.dub | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jarsigner.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-io_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64_3.103.1.v20140903-1947.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-annotations-common.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ConsumerSub_Bypass30-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\LICENSE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\core_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Microsoft.Office.PolicyTips.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\booklist.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk15\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Candara.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\STSLISTI.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\AugLoop\third-party-notices.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusDemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\msjet.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jjs.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_ja.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond-TrebuchetMs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\TelemetryDashboard.xltx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-heapwalker.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIntegration.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-explorer.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_LinkDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ca.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\java.policy | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiling.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial1-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sqlpdw.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-multitabs.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\sqmapi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Internet Explorer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_f14\FA000000014 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\lij.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.ui_4.0.100.v20140401-0608.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\nl.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerView.PowerView.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_COL.HXT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Author2XML.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office-client15.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\msotelemetryintl.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\th\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONENGINE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_fr.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.reportviewer.common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue II.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\lpc.win32.bundle | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\kaa.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-text.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-api.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\ru-RU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\external_extensions.json | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.descriptorProvider.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\release | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\Services\verisign.bmp | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\XLMACRO.CHM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Localytics.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\drive.crx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-keyring.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_KMS_ClientC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_COL.HXT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\it.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-windows.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\xjc.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL64.DllA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.update\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\rmic.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-nodes.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\javafx-src.zip | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\lcms.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019DemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jli.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jsoundds.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\correct.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\ir.idl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\et.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\day-of-week-16.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-dialogs.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\prism_sw.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives_1.1.100.v20140523-0116.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\klist.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ORGCINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-queries.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\86.0.4240.111.manifest | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.alert.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator_2.0.0.v20131217-1203.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql2000.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\wab32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\ea-sym.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Integration\Addons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\SetupMetrics\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.felix.gogo.command_0.10.0.v201209301215.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.Interfaces.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadrh15.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\jce.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jjs.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-uisupport.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jsdt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\gimap.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-services.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\ATPVBAEN.XLAM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-queries.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\unpack.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_profile.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\Triedit\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-actions_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-windows.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-ui.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\InputPersonalization.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\cmm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\GreenBubbles.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\servertool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-favorites.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Internet Explorer\SIGNUP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Violet.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\boot_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\IPSEventLogMsg.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\BIBFORM.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\basicstylish.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\TabTip.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\include\win32\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\invalid32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.contenttype_3.4.200.v20140207-1251.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\sv-SE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win10_RTL.mp4 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mce.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Paper.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.commands_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.OAuth.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.uk-ua.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvm.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\uk-UA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\mix.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msader15.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_ja_JP.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_f33\FA000000033 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hr.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_win7.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\gu.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\instrument.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.Edm.NetFX35.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkServerCP | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\oskclearuibase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.fr-fr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sa.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-root.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\et\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\bin\server\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART1.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_zh_TW.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\gstreamer-lite.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496926556.profile.gz | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-sendopts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-loaders.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Ion Boardroom.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.felix.gogo.runtime_0.10.0.v201209301036.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ext_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-annotations-common.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipscsy.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jaas_nt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.commons.logging_1.1.1.v201101211721.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui_2.3.0.v20140404-1657.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\unpack200.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.jdp_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer_3.2.200.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mip_telemetry.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\jawt.lib | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\resource.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_zh_HK.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Packaging.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadco.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-processthreads-l1-1-1.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsnld.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\SOLVER32.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Internet Explorer\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdaremr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-nodes.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\cursors.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hr-hr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\plugin2\npjp2.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Extreme Shadow.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\uz.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\dt_shmem.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\sunec.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyrun.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\keytool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\serialver.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_zh_CN.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsen.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-options.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-cli.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_olv.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-api.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\split.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsymxb.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_f33\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\FindPush.ocx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7cm_en.dub | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QRYINT32.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\tzmappings | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\blacklisted.certs | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7wre_en.dub | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\COPYRIGHT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bn.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\j2pcsc.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipssve.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\kab.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\rtscom.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-output2.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\t2k.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ar-sa.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\nio.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\ieinstal.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\PowerPivotExcelClientAddIn.rll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_200_percent.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri-Cambria.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\hr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-output2.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher_1.3.0.v20140415-2008.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-modules.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.PPT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\EventSource.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\bg-BG\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\dropins\README.TXT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.net_1.2.200.v20120807-0927.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial1-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javac.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-core-kit.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Graph.exe.manifest | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000050\FA000000050 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FilterModule.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-applemenu.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\delete.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\Ole DB\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\net.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fi.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-execution.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.dll.config | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-nodes.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ta.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-GB.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\splash.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaTypewriterRegular.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-root-bridge-test.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sa.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.felix.gogo.shell_0.10.0.v201212101605.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\dragHandle.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\CT_ROOTS.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\SoftBlue.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\docs.crx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\tnameserv.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.FuzzyMatching.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\oskmenubase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\javacpl.cpl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Picasso.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fi-FI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-common.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\osknavbase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\decora_sse.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\desktop.ini | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\mashupcompression.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\nacl_irt_x86_64.nexe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.expressions_3.4.600.v20140128-0851.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msador28.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.services_1.2.1.v20140808-1251.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\rt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodicon.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-locale-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jsoundds.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-locale-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelCombinedFloatieModel.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_it.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\AppvIsvSubsystems32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Exchange.WebServices.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdaps.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt_1.1.1.v20140903-0821.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\jfr\default.jfc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\pt-PT\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\access-bridge-64.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe.config | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jhat.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net_1.2.200.v20140124-2013.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntryR_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\basicelegant.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jabswitch.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgeCalls.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\etc\visualvm.clusters | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-windows_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jabswitch.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_WHATSNEW.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-core.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\com-sun-tools-visualvm-modules-startup.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\EntityPicker.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\io.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\Microsoft.Ink.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsar.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONDIRECTX.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jcmd.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\splashscreen.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\TellMeExcel.nrr | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pl.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.ProgressiveProcessing.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSQRY32.CHM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\EXCEL.VisualElementsManifest.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\alert_obj.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\shaded.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaTypewriterBold.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\tr-TR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\ja-jp-sym.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\ktab.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\dblook.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\config.ini | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\McePerfCtr.man | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ne.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\cacerts | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_f3\FA000000003 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.event_1.3.100.v20140115-1647.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoDev.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core_2.3.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\blacklist | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\CSS7DATA0009.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\de.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\adovbs.inc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\te.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\kinit.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\MeasureUnpublish.reg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\adcjavas.inc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496939244.profile.gz | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\BOMB.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macTSFrame.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\c2rpridslicensefiles_auto.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC.HXS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\PYCC.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Banded Edge.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-visual.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\msvcp120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessDemoR_BypassTrial365-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office15\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\resources.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\plugin2\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_MoveNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\npt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\cldrdata.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\lpklegal.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\ielowutil.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\GRAY.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\tr.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\boot.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\GRAPH.EXE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaSansRegular.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Configuration\ssn_high_group_info.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\rmid.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\preface.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_CopyNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgePackages.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Georgia.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\pack200.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Times New Roman-Arial.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\glib-lite.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GR8GALRY.GRA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ast.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\as80.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\uk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\lt.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunpkcs11.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javaws.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\amd64\jvm.cfg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.EditorRibbon.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Green.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalDemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WordNaiveBayesCommandRanker.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\idlj.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientARMRefer_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MINSBROAMINGPROXY.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\QUERIES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\adcvbs.inc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\msvcr120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcDemoR_BypassTrial365-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-core-execution.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\hprof.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_sv.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\applet\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\hwrusash.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\APASixthEditionOfficeOnline.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\Services\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-api-caching.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\sound.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hy.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsrom.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaSansRegular.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sr-spl.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdasql.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvApi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\locale\updater_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-loaders.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\cldrdata.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\w2k_lsa_auth.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496926306.profile.gz | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.annotation_1.2.0.v201401042248.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\misc.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqloledb.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\sl-SI\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_kor.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado25.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.ssl_1.0.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\tt.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\charsets.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\MSOSEC.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\ShadesOfBlue.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\basicsimple.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado20.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\et.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.XLS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Bears.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Modeler.UI.rll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.ReportingServices.DataExtensions.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\zh-CN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Library\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.console_1.1.0.v20140131-1639.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\updater.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.Extensions.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fr-FR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\FA000000009 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-oql.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jfr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\US_export_policy.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Configuration\config.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.DocumentServices.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Latn-RS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-RS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgeCalls.c | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\AccessRuntime2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\.eclipseproduct | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbynet.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\indxicon.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.actionProvider.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Roses.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Ion.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\ARROW.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\net.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcDemoR_BypassTrial365-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\he\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\javafx.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.DataWarehouse.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MSBARCODE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\cpprestsdk.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-multitabs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019DemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdfmap.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linesdistinctive.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.TransformDataByExample.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\GostName.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\javaw.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-applemenu.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\setup.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientPreview_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\nl-NL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-remote.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7.wmv | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jmc.ini | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Riblet.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVOrchestration.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.EventSource.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadds.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientLangPack_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\sunmscapi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-runtime-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_f2\FA000000002 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\fontmanager.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000011\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\cmm\GRAY.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\msvcp120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\GRAPH.ICO | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipshe.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-explorer_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\CSS7DATA000A.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.http.registry_1.1.300.v20130402-1529.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.base.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Gill Sans MT.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.Interfaces.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lv.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\TrebuchetMs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProDemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.th-th.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7Handle.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest1-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINDATAPROVIDER.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoDev.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\LICENSE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\BREEZE.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoBeta.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\Default.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-favorites.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\minimalist.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\System.Spatial.NetFX35.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\GostTitle.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART4.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VGX\VGX.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-uisupport.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\management-agent.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\readme.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\am.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-services.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fr-FR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sr-spc.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\uk.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\th.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ku.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\it.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-search.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7z.sfx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.es-es.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\win32\jawt_md.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.dcfmui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsid.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-execution.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\dt_socket.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linesstylish.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\System.Runtime.InteropServices.RuntimeInformation.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.update.configurator_3.3.300.v20140518-1928.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\localedata.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvm.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nb.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\dnsns.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\FA000000006 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_sw.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\ssv.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\GKPowerPoint.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Peacock.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-core.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\VVIEWRES.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Integral.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\DBGCORE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\TYPE.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\cacerts | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\prism_d3d.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\lt\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2iexp.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\bin\dtplugin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pa-in.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\javafx-mx.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\etc\visualvm.conf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\.lastModified | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\ja-JP\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\native2ascii.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-spi-actions.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-awt_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-explorer_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-windows.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Spatial.NetFX35.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fr-CA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\server\classes.jsa | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\jaccess.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\csi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_preferencestyle.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription1-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsym.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_f7\FA000000007 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-search_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fontconfig.properties.src | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ba.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightDemiItalic.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_w1\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Common.Wizard.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.http_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\CHART.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-time-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Document.XmlSerializers.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\sound.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\[email protected] | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\org-netbeans-modules-profiler_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\ImportSkip.pot | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\mc.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-timezone-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019DemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zCon.sfx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\GKWord.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sl.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\orcl7.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fur.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipssrb.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-templates.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\C2R64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-ui.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\baseAltGr_rtl.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\policytool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\file_obj.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\Office16\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUICellModel.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\id.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-text.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\sk-SK\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.osmmui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\deploy.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\attach.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-charts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSO.ACL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-lib-uihandler.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\javafx_font_t2k.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\msipc.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookicon.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.batik.css_1.7.0.v201011041433.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\sunjce_provider.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\AppXManifest.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\micaut.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\da\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\centered.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\THIRDPARTYLICENSEREADME-JAVAFX.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000008\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\charsets.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\applet\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\jvm.hprof.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_COL.HXC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_fr.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\.lastModified | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\LICENSE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation_1.2.100.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-util-enumerations.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.PowerBI.AdomdClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ko.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\youtube.crx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-options.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\javaws.policy | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\com.jrockit.mc.console.ui.notification_contexts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses\c2rpridslicensefiles_auto.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientOSub_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvSubsystemController.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_CopyDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Storage.XmlSerializers.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\excel-udf-host.win32.bundle | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse_2.1.200.v20140512-1650.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_de.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub_M365_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\db2v0801.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\v8_context_snapshot.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_KMS_ClientC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\AdHocReportingExcelClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\lt-LT\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jdwp.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.wordmui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Windows.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-snaptracer.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nl.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.inject_1.0.0.v20091030.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ar.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_KMS_ClientC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\TPN.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\msadc\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pt-br.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-nodes.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\instrument.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019DemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fy.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\currency.data | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\leftnav.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\JAWTAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\dropins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PPINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoCanary.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-windows.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\MSOSEC.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\DocumentFormat.OpenXml.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\calendars.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\extcheck.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\classes.jsa | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.update\platform.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.property_1.4.200.v20140214-0004.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.fr-fr.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\Source Engine\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\cpprestsdk.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Core.NetFX35.V7.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.es-es.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\id.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\iexplore.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-progress.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\javaws.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.bg-bg.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\trusted.libraries | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\org-openide-filesystems_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.MashupEngine.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\tipresx.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-bootstrap.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\FlickAnimation.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoCanary.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019DemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jsdt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-common.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-ui.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office16\OSPP.HTM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Facet.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Green.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019DemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Licenses16\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Office.Interop.Outlook.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\de\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javaw.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\glass.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013bw.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt_0.12.1.v20140903-1023.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-annotations-common.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\WindowsAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Office.Interop.Excel.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\LINEAR_RGB.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ru.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\kinit.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup-impl.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Integration\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\psfont.properties.ja | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\gl.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo_large.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\zh-tw.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\EnableUnlock.wps | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-swing-plaf.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Practices.Unity.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jsse.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Stars.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvStreamingManager.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe.config | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Document Themes 16\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteFreeR_Bypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hi.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ChakraCore.Debugger.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Word.Word.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\it\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-spi-quicksearch.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ja-jp.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\OFFICE16\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\nb-NO\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\keytool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Orange Circles.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\dsn.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-threaddump.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\ucrtbase.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART10.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.DataWarehouse.Interfaces.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository_1.1.300.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.reportviewer.winforms.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rightnav.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\SUCTION.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\psfontj2d.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-sampler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProDemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\verify.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\hwrusalm.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\accessibility.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\nashorn.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\DataStreamerLibrary.dll.config | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019DemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_cs.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientVolumeLicense_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\jconsole.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\server\Xusage.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Franklin Gothic.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\hr-HR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\resources.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-bridge-office.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvmstat.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\meta-index | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-CN\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-compat.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-heap-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\excel.exe.manifest | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkClientCP | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util-lookup_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Office 2007 - 2010.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Office.PowerPivot.ExcelAddIn.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-windows.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\et-EE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\chstic.dgml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jpeg.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.server_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-execution.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sr.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jli.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-api-caching.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\FUNCRES.XLAM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sl.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\WHOOSH.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-text_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sa.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mng2.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\management-agent.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ClickToRun\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.metadataprovider.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\pl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\fxplugins.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusDemoR_BypassTrial365-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.Common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\VOLTAGE.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-util.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\imap.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7-zip.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\jmxremote.password.template | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\fi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019DemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyoptionaltools.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Green Bubbles.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\GKExcel.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\pt-BR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART2.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-core.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\unpack.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\es-ES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jawt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\kcms.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\be.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-favorites.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\TellMeWord.nrr | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\orb.idl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\loc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsymb.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql_2.0.100.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2ssv.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\external_extensions.json | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup-impl.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-attach.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\CSIRESOURCES.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\DESIGNER\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\rmiregistry.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\sunmscapi.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ku-ckb.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\he-IL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\plugin.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\de-DE\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\bundles.info | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\kn.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\AUTHOR.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-private-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Slice.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINSHELL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Schoolbook.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\SPPRedist.msi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\hive.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\adojavas.inc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.identity_3.4.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\management\management.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\tr-TR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher_1.3.0.v20140911-0143.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-compat.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-visual.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ja\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msxactps.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychartplugin_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\decora_sse.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ro-RO\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fi.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-core-io-ui.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProDemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\RepoMan.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-PT.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\contbig.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsita.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pl-pl.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\w2k_lsa_auth.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mip_upe_sdk.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ms.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text_3.9.1.v20140827-1810.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\ffjcext.zip | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\C2R64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalDemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\unpack200.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\Informix.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\access-bridge-64.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\ant-javafx.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\+Connect to New Data Source.odc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\resource.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk_1.0.300.v20140407-1803.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-print.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-filesystems.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red Orange.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ViewOnly_ZeroGrace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_KMS_ClientC2R-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Office.Interop.Excel.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\HarvardAnglia2008OfficeOnline.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\wab32res.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\masterix.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-sampler.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\java.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7fr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\WPFEXTENSIONS.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-javahelp.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7en.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\elevation_service.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntryR_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\excelcnvpxy.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zFM.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\wsdetect.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\profilerinterface.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\InkDiv.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemuiset.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ky.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\License.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.security.ui_1.1.200.v20130626-2037.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\el-GR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado28.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\THIRDPARTYLICENSEREADME-JAVAFX.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteFreeR_Bypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_company.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\bg-BG\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.SqlServer.Configuration.SString.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\es-MX\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-multiview.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\tzmappings | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\hr-HR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\javacpl.cpl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.continuation_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-dialogs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs-nio2.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\deployJava1.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ms.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_COL.HXC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.16.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Models.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.ConnectionUI.Dialog.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelFloatieXLEditTextModel.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\otkloadr_x64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-progress-ui.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsel.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\ro-RO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\setEmbeddedCP | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bg.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\java-rmi.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Garden.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\README-JDK.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\mshwgst.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\new-trigger-wiz.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-coredump.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_COL.HXC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_ko.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\ssvagent.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\jni.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jvm.hprof.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javapackager.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-dialogs_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\java.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoBeta.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fontconfig.bfc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\dblook | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\artifacts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_es.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\startNetworkServer.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\lcms.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ro-ro.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-impl.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActions.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\concrt140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Interop.MSDASC.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.DataWarehouse.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ca\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\VERSION.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\bwclassic.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelInterProviderRanker.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jps.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-compat_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_ko.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\az.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\security\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper_1.0.400.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\hijrah-config-umalqura.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\WindowsAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-lib-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-swing-plaf.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hu.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\DRUMROLL.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\symbase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\pt.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledb32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mng.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jsadebugd.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\date-span-16.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_COL.HXT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fontconfig.properties.src | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\dtplugin\npdeployJava1.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\javafx_font.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.lock | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluTSFrame.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXPTOOWS.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lt.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.batik.util.gui_1.7.0.v200903091627.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\locale\updater_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-heapwalker.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\MergeUninstall.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\jmxremote.access | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\sunec.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-output2.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\amd64\jvm.cfg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\chrome_proxy.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\et-EE\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-execution_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\lv-LV\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ko.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-core.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\accessibility.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\management\snmp.acl.template | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\gl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUIFormulaBarModel.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\TextConv\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremDemoR_BypassTrial365-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\th.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.artifact.repository.prefs | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.http.jetty_3.0.200.v20131021-1843.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-core-kit.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-options.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\cmm\PYCC.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdaprsr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_altgr.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7cm_fr.dub | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\sysinfo.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\zipfs.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.manifest | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\BlockResolve.asx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\hi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Office Theme.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalDemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\mraut.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Client\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\si.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\javaws.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\include\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-TW.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.di_1.0.0.v20140328-2112.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sr-latn-rs.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sv.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-BR.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-awt.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\Welcome.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-applemenu.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derby.war | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ug.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\splashscreen.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\deploy\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial Black-Arial.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\co.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\ij | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART3.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jsound.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\icudtl.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqloledb.rll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\setEmbeddedCP.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MML2OMML.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\FrequentOfficeUpdateSchedule.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalDemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\wsdetect.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office16\OSPP.VBS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-sampler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Office 2007 - 2010.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluHandle.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Subtle Solids.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightItalic.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk16\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\SIGNUP\install.ins | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\sa-jdi.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.Diagnostics.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\he.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntimeR_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.alert.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-multibyte-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SLINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sl-si.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\Stationery\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\vi.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-attach.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-uisupport.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\Classic.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.jobs_3.6.0.v20140424-0053.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_de_DE.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Edm.NetFX35.V7.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\IpsMigrationPlugin.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\AdeModule.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jp2iexp.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\LocalizedStrings.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-options-api.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-lib-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-dialogs_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-masterfs.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\ShapeCollector.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\jdwpTransport.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\hwrenclm.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\BI-Report.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\kinit.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\libGLESv2.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\console_view.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1665.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-sendopts.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-options.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Reflection.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_pt_BR.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\j2pcsc.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ro.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019DemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsymk.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690Nmerical.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.da-dk.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\YEAR.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\VGX\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\3082\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7es.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glossy.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsymt.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-conio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\NetworkServerControl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-fallback.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_f2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\appletviewer.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.ibm.icu_52.1.0.v201404241930.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\Addons\OneDriveSetup.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientVolumeLicense2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.vsto | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe.config | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\ado\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\orbd.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntry2019R_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ja-JP\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaSansDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-execution.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\is.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\COPYRIGHT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.di_1.4.0.v20140414-1837.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-settings.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jpeg.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands_0.10.2.v20140424-2344.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\dcpr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Interceptor.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\notification_helper.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jawt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\dcpr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16ConsumerPerp_Bypass30-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ko-KR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hr.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-split.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.commands_3.6.100.v20140528-1422.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_MoveDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Document Parts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pt-br.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\org-openide-modules.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.OleDbInterop.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\conticon.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-explorer.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\el-GR\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest1-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\fontmanager.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations_2.4.0.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\management.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-options-keymap.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\XLLEX.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_win7.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-masterfs-nio2.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\flight_recorder.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\classlist | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\lv-LV\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\send-email-16.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.RsClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\rmiregistry.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Licenses\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\msvcp140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_KMS_ClientC2R-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-search_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\ij.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\rt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\3082\MSO.ACL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Bears.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-snaptracer.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Milk Glass.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\kk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\CASHREG.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\meta-index | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins_1.1.200.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_KMS_ClientC2R-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ja.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiling.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\Welcome.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\NOTICE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\dt_shmem.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\TURABIAN.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART8.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\db\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PPT_WHATSNEW.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7wre_es.dub | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-phonetic.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipscat.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\JavaAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.SapClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\cs.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-io-ui.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mscss7wre_fr.dub | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\core_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\IpsMigrationPlugin.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.bidi_0.10.0.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\ado\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_LinkDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-startup.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\management.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\bin\plugin2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-modules_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\ConvertToWait.cab | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-multitabs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-windows.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll.sig | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-utilities.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\zip.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\16\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-stil.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-io.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\TelemetryLog.xltx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jjs.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-print.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial-Times New Roman.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.VisualStudio.Tools.Applications.Runtime.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicTSFrame.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\vcruntime140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zG.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-environment-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.VisualStudio.OLE.Interop.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.tr-tr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jfxmedia.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-spi-actions.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.shared.Office.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Library\EUROTOOL.XLAM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\classfile_constants.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\VSTO\10.0\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.fi-fi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_es.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\local_policy.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-print.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1036\MSO.ACL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.text_3.5.300.v20130515-1451.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_mac.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\FOLDER.ICO | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mfc140u.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sampler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\win32\jni_md.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-io-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\gstreamer-lite.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.et-ee.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-actions.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\msvcp120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ro\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\16\Built-In Building Blocks.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.common_2.10.1.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.security_1.2.0.v20130424-1801.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ru-RU\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\oledb32r.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\en-us\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\HAMMER.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\History.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\pl-PL\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\StreamServer.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\locale\jfluid-server_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\PowerPivotExcelClientAddIn.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbytools.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\CLVIEW.EXE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.he-il.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-swing-outline.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GRINTL32.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\nb-NO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mip_core.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WORD_WHATSNEW.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrome.7z | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Corbel.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\an.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\java.policy | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\klist.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\TellMePowerPoint.nrr | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\id\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_elf.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\RELEASE-NOTES.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\psfont.properties.ja | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodbig.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado60.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\management\jmxremote.access | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Inset.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\preloaded_data.pb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\+NewSQLServerConnection.odc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART6.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART7.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-util.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\fr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-appui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019DemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\PowerPivotExcelClientAddIn.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelTellMeOnnxModel.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-oql.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\tools.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusDemoR_BypassTrial365-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jdb.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\CHAKRACORE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\gu.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\gmail.crx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-actions.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\java.security | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\tabskb.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedbck2.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ps.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\sl-SI\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\cmm\CIEXYZ.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL.HXS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_f3\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.de-de.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.el_2.2.0.v201303151357.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.OData.NetFX35.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sv-se.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\EXPLODE.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\.lastModified | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\sRGB.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app_1.0.300.v20140228-1829.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-awt.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec64.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019DemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.it-it.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_zh_TW.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\CLICK.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\oskpredbase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaTypewriterBold.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\prism_common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange Red.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\images\bing.ico | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\glib-lite.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496937509.profile.gz | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\[email protected] | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\en-US\wab32res.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RIntLoc.en-us.16.msi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCHART.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfxswt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.text.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-cli.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\GB.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\psfontj2d.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.Common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-actions_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-utility-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32ww.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\cs.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\stopNetworkServer.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.dom.events_3.0.0.draft20060413_v201105210656.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\lt-LT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Median.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\zh-cn.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\README.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\uk.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\jfxrt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-remote.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\jfxrt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription1-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_sv.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\Office16\SLERROR.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\AugLoop\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\VSTO\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macGrey.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.el-gr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\hijrah-config-umalqura.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipshrv.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\eclipse_update_120.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000050\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\ktab.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\XLSLICER.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.Common.v4.0.Utilities.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-US.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui_3.106.0.v20140812-1751.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\FileSystemMetadata.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\IEAWSDC.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Cambria.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javafxpackager.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\policytool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_d3d.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\CIEXYZ.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\nashorn.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.lt-lt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2native.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\hprof-16.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\SubsystemController.man | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookbig.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\jfr\profile.jfc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\BHOINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sq.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\org-netbeans-core_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\osfFPA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\hmmapi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\DirectDB.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\logging.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SkypeForBusinessBasic2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsjpn.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\InvokeEnable.pps | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\pack200.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\hwrlatinlm.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\vi.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-utility-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\AccessRuntime_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntry2019R_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.DataStreamer.Excel.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mk.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsnor.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\sawindbg.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4.ssl_1.0.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\it-IT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.powerpointmui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\etc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\da.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightRegular.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\awt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\ssvagent.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Interceptor.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.Themes.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsptb.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\keytool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\mip_clienttelemetry.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\dt_socket.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\mshwLatin.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_globalstyle.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_KMS_ClientC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pt-pt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription1-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\1036\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql70.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightRegular.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fr.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sk.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\t2k.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.contexts_1.3.100.v20140407-1019.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\bn.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql90.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Initialization.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Gallery.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-explorer.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.oracle.jmc.executable.win32.win32.x86_64_5.5.0 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\org-openide-util.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\jfluid-server-15.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest1-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Roses.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\servertool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_zh_HK.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\packager.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\yo.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\org-openide-filesystems_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\ext\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\verify.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\tr\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.Authorization.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ru-ru.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.vi-vn.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.concurrent_1.1.0.v20130327-1442.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-attach.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\Ole DB\en-US\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientARMRefer2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\concrt140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.PPT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Office.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\TAG.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\dnsns.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\management\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Layout.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\CSS7DATA000C.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Violet II.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\topnav.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_KMS_ClientC2R-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\content-types.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\da-DK\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hu.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ko\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\en.ttt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16ConsumerPerp_Bypass30-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\jvm.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Office 2007 - 2010.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBlue.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\LyncVDI_Eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\jvmti.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogo.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\javafx_font.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_fr.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ExcelNaiveBayesCommandRanker.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Shims.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSSRINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\pop3.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\jfluid-server.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProDemoR_BypassTrial180-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadox28.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-favorites.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32mui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.WindowsAzure.StorageClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ka.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\d3dcompiler_47.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART13.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_pt_BR.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Marquee.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado27.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-text.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\OFFICE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\cpyr.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\STSLIST.CHM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\net.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\diagnostic-command-16.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-BA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_pwa_launcher.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\sv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\Triedit\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mac.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-heapdump.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\README.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\meta-index | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\help.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINCORE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PowerPointNaiveBayesCommandRanker.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javadoc.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.alert_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-text_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-ui.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019DemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_KMS_ClientC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\nio.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\plugin2\msvcr100.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\JAWTAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\profilerinterface.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\el.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\C2R32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\COIN.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-process-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\System.ValueTuple.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\MSInfo\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jrunscript.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\wsgen.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-string-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.UI.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\va.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-utilities.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.ConnectionUI.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\jvm.lib | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\smtp.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\java-rmi.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win10.mp4 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\NetworkServerControl.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-queries.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCONTROL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART14.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\servertool.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.excelmui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\mip.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019DemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\glass.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\local_policy.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Green Yellow.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.osmuxmui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsrus.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Document.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fa.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_basestyle.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.proofing.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\CHICAGO.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado21.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\pack200.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jabswitch.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mru_on_win7.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_zh_TW.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeServiceBypassR_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART11.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\j2pkcs11.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\manifest.json | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\officeinventoryagentlogon.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\EntityDataHandler.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\javap.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\sv-SE\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.HostIntegration.Connectors.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\SOLVER.XLAM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvVirtualization.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Internet Explorer\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-tools.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ZeroByteFile | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red Violet.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdatl3.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\FlickLearningWizard.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.services_1.1.0.v20140328-1925.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-settings.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\SAMPLES\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\af.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\dtplugin\deployJava1.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Tw Cen MT-Rockwell.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ro.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Configuration\card_terms_dict.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.base.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.AdHoc.Excel.Client.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_MoveDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util-lookup_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\officeinventoryagentfallback.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.FuzzyMatchingCommon.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jp2native.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE.POTX | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.SapBwProvider.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\ct.sym | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ja.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsymsb.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\LogoImages\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-spi-actions.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.filesystem_1.4.100.v20140514-1614.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-actions.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\VERSION.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\THIRDPARTYLICENSEREADME.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7-zip32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\derby_common.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.base_4.0.200.v20141007-2301.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-swing-tabcontrol.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-execution.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\javaws.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sqmapi_x64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\APPLAUSE.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\eula.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\dt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPHandle.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkClientCP.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-awt_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linessimple.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\he-IL\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\LICENSE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ospintl.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.DOC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCOMMON.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ja-jp.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt_0.12.100.v20140530-1436.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_COL.HXT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ru\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\AppvIsvSubsystems64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ca.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-progress.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUICellLayoutModel.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription4-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\it-IT\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\jvmticmlr.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXPTOOWS.XLA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\join.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\mshwLatin.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\kcms.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\cmm\sRGB.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\bg\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\offreg.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sk-sk.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jmx.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ar.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ru.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\bwcapitalized.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\System.Web.Mvc.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql120.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\LASER.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadcor.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.preferences_3.5.200.v20140224-1527.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\mfc140u.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-timezone-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_ko_KR.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse_1.1.200.v20140414-0825.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\Integrator.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\eclipse_update_120.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription1-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8_RTL.mp4 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.ReportingServices.QueryDesigners.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\msinfo32.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ta.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.ecore_2.10.1.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\da.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunec.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.zh-cn.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\snmp.acl.template | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\jfxswt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\mn.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\deploy.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jdwp.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\tnameserv.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremDemoR_BypassTrial365-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fa.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\bci.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.AnalysisServices.AdomdClientUI.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\oracle.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-GB\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-io.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\en-GB\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-util-enumerations.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\fre\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\content-types.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\XLINTL32.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.commons.codec_1.6.0.v201305230611.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\bwnumbered.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\no\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-templates.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\AppVLP.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsplk.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART9.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin_2.0.100.v20131209-2144.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunmscapi.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\sunec.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_LinkNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_COL.HXT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART15.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClientIsv.man | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT.HXS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-coredump.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-modules-appui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\currency.data | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.attach_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-api.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\j2pkcs11.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipstr.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Top Shadow.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\flat_officeFontsPreview.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticattribute.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-queries.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\tr.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-execution.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\boot_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Wisp.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\i640.cab.cat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jdeps.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\java_crw_demo.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\ko-KR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-search.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\lib\fonts\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\ffjcext.zip | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\Xusage.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\management.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RInt.16.msi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ml.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\manifest.json | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macHandle.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-windows_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\nn.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\klist.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\profile.jfc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\logging.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-io.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-options_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\ClientCapabilities.json | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\title.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVCatalog.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-stdio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GRLEX.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\client_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\Content.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\plugin.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019DemoR_BypassTrial180-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.AddinTelemetry.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.cs-cz.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActionExceptionHandlers.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\PROCDB.XLAM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MINSBPROXY.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-api.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\msvcp120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ExcelFloatieTextModel.bin | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\orbd.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_ja.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\WIND.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jmc.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvm.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-coredump.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_K_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.dll.manifest | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\descript.ion | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\wsimport.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npdeployJava1.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-private-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-compat_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3102-0000-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ORGCHART.CHM | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.XLHost.Modeler.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\cs\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\FlickLearningWizard.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\stopNetworkServer | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\sysinfo | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-filesystem-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\JavaAccessBridge-64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\locale\jfluid-server_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\tzdb.dat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow Orange.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremDemoR_BypassTrial365-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\LyncBasic_Eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-visual.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-compat.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\OrangeCircles.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator_1.1.0.v20131217-1203.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD.HXS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART12.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_it.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-filesystems.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\zipfs.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsymsl.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jinfo.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-keyring-impl.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-lib-uihandler.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16EnterpriseVL_Bypass30-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\pt-PT\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-TW\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msador15.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_school.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jce.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\FormatPing.7z | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\IEShims.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jconsole.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.kk-kz.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.jrockit.mc.rcp.product_root_5.5.0.165303 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libEGL.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Logo.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox_1.0.500.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\mr.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\1033\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\el\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-api-visual.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-common.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.services_3.4.0.v20140312-2051.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.util_1.0.500.v20130404-1337.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\management\jmxremote.password.template | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jaas_nt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\eula.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\rmiregistry.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdarem.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\flavormap.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.zh-tw.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jfr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.OData.Query.NetFX35.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\org-openide-filesystems.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\sk\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPOlive.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jfxmedia.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\CHIMES.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\doclib.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jvisualvm.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\resources.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Warm.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Shades of Blue.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyclient.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-util-lookup.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.16.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ms-my.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsptg.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.security_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ko-kr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.ProviderShared.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-options_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvmstat.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jfxwebkit.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaSansDemiBold.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\eventlog_provider.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.components.ui_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\javaws.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_zh_CN.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msdaprst.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.sun.el_2.2.0.v201303151357.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.io_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\el.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.AdomdClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-tools.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028183044.pma | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\ext.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Core.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\lv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\PackageManifests\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaTypewriterRegular.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_pt_BR.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker_1.1.200.v20131119-0908.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-io-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MsoAriaCApiWrapper.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\IVY.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-nodes_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\es-MX\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticnotification.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\CLVWINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Author2String.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\sv.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.intro_3.4.200.v20130326-1254.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application-views.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\hu-HU\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\zh-TW\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\es\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\INTLDATE.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\7-Zip\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\splash.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadomd.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16EnterpriseVL_Bypass30-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_f7\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.AdomdDataExtension.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup-impl.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\IEEE2006OfficeOnline.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.util_8.1.14.v20131031.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.forms_3.6.100.v20140422-1825.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-sendopts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\CERTINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\concrt140.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\fxplugins.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7_RTL.wmv | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\ReportingServicesNativeClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-util-enumerations.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\blacklist | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightDemiItalic.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-CN.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_winxp.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-spi-actions.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\trusted.libraries | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_COL.HXC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\CAMERA.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\msdaosp.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor_1.0.300.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\net.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SkypeForBusinessVDI2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.runtime_3.10.0.v20140318-2214.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\java.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PROTOCOLHANDLERINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\nl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\rmid.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MEDIA\PUSH.WAV | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.SqlServer.Types.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views_3.7.0.v20140408-0703.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-swing-outline.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_pl.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTest-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\localedata.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jli.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\java.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\kk.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\TabIpsps.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado15.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\hprof.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Organic.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial1-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fr-CA\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\libEGL.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\cursors.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\index.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-swing-tabcontrol.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\msix.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derby.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_KMS_Client_AE-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\lv.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jsound.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console_1.0.300.v20131113-1212.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-core-kit.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\calendars.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\WacLangPack2019Eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgeCallbacks.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1655.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-api.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Configuration\card_security_terms_dict.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\GFX.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\COPYRIGHT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\jsse.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipskor.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sampler.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTrial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\default.jfc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.servlet.jsp_2.2.0.v201112011158.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientOSub2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\fr.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-spi-quicksearch.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Constantia-Franklin Gothic Book.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\msotdintl.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000011\FA000000011 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\da-DK\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\LICENSE | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_KMS_ClientC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\java.security | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\jfr.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\uk-UA\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jstack.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\msadc\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.exe.sig | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-multiview.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-heapdump.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7z.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\br.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\AppvIsvSubsystems64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sampler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\npt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTrial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.lv-lv.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-heapdump.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fi-FI\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\org.eclipse.rcp_root_4.4.0.v20141007-2301 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-uihandler.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\bci.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sw.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\sunmscapi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.nl-nl.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_CopyDrop32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic-Palatino Linotype.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\ms\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\core.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l2-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsfin.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Peacock.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\security\javaws.policy | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7-zip.chm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\IFDPINTL.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_basestyle.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo_small.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_ru.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\ext\sunpkcs11.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_COL.HXT | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\US_export_policy.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-uihandler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000008\FA000000008 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.batik.util_1.7.0.v201011041433.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsesp.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_100_percent.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\bg.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\JitV.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_f4\FA000000005 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\VC\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Soft Blue.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\blafdoc.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher_1.1.0.v20131211-1531.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-loaders.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\core_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClient.man | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\eu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\javafx_iio.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l2-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.Excel.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\IPSEventLogMsg.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\tracedefinition130.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\nl-NL\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028183016.pma | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Tw Cen MT.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-threaddump.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-search.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_de.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\classlist | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_COL.HXC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\ExtExport.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART5.BDR | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\SkypeServiceBypassR_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_COL.HXC | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\as90.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.SPClient.Interfaces.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems64.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-execution_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial3-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_Subscription-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\EntityPickerIntl.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\7-Zip\Lang\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\mlib_image.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\uarrow.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\FPA_w1\WA104381125 | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\HandPrints.jpg | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.webapp_3.6.300.v20140407-1855.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-core-kit.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-progress-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\meta-index | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.ReportDesign.Common.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\sl\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\db\bin\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\Sybase.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\cmm\LINEAR_RGB.pf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\loc\AppXManifestLoc.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Aspect.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_ja_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\schemagen.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-spi-quicksearch.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTrial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\msvcr120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Configuration\card_expiration_terms_dict.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\eo.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fontconfig.bfc | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\BCSRuntimeRes.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\flavormap.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\javafx_iio.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-localization-l1-2-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\db\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\offsyml.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\MANIFEST.XML | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-swing-tabcontrol.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG.HXS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-settings.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\casual.dotx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\InstallerMainShell.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_it.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\org-netbeans-core-windows_visualvm.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\tnameserv.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-math-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription1-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_blu.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-awt.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jre1.8.0_66\bin\plugin2\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Office.PowerPivot.ExcelAddIn.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-options-api.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\TITLE.XSL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemui.msi.16.en-us.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVPolicy.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\java_crw_demo.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\hu-HU\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\es-ES\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipshi.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\InkObj.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\org-openide-util-lookup.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sa.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\trdtv2r41.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\System\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\msvcr120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.ssl_1.1.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\zh-TW\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadox.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-options-keymap.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Grace-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7z.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\msvcr120.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-string-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sk.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\orbd.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Smokey Glass.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTest-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH.HXS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\FPA_f4\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.ui.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jar.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\invalid32x32.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office15\pidgenx.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\ar-SA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Retrospect.thmx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipssrl.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\about.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCHARTCOMMON.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.ja_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-api-caching.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\jp2launcher.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-keymap.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\mojo_core.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\startNetworkServer | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerEvaluators.exsd | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-stdio-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-convert-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_jpn.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libGLESv2.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.RSA | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-modules_zh_CN.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\TextConv\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\sk-SK\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\MLASeventhEditionOfficeOnline.xsl | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\java.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-print.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MEDIA\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_heb.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Grunge Texture.eftx | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-explorer.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\README.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jstat.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.di.extensions_0.12.0.v20140417-2033.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help_3.6.0.v20130326-1254.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jfxwebkit.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.lucene.analysis_3.5.0.v20120725-1805.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\rmid.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.ScriptDom.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jmap.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-utilities.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\java-rmi.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application-views.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-processthreads-l1-1-1.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Trial-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\POWERMAPCLASSIFICATION.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\tipskins.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\pl-PL\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Dallas.OAuthClient.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\en-US\mip.exe.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\hi.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_partstyle.css | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.nb-no.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msadcer.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es-419.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.core_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicHandle.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\iediagcmd.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\th-TH\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessDemoR_BypassTrial365-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Subscription-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\DataStreamerLibrary.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf_3.4.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msado26.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.XLS | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\vi\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipschs.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\license.html | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine_2.3.0.v20140506-1720.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Consolas-Verdana.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\jaccess.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\javafx.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\ClientLangPack2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Trial-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\sqmapi.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\ktab.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.filetransfer_5.0.0.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hu-hu.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2launcher.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\ado\msadomd28.tlb | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Internet Explorer\en-US\hmmapi.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\mlib_image.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\zh-CN\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\unpack200.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightItalic.ttf | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkServerCP.bat | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-heapwalker.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_ca.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\MANIFEST.MF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-attach.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial2-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_KMS_Client-ul.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Edm.NetFX35.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.id-id.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\awt.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_PrepidBypass-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\Client2019_eula.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\es.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.text.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\tipresx.dll.mui | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.properties | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt-BR\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_profile_large.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ink\ipsfra.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\include\jawt.h | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\System\msadc\msaddsr.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTest-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\AugLoop\bundle.js | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_zh_4.4.0.v20140623020002.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate32.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\PRIVATE_ODBC32.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.MDXQueryGenerator.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-uihandler.xml_hidden | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\master_preferences | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_KMS_Client_AE-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fil.pak | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-api.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\ANALYS32.XLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_hu.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\bin\zip.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-180.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\nb.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Stars.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\bin\javafx_font_t2k.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4_1.0.800.v20140827-1444.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_ja.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jre1.8.0_66\release | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\DATATRANSFORMERWRAPPER.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\MSIPC\hu\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-80.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hi-in.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-progress.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Core.NetFX35.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\de.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Google\Chrome\Application\chrome.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Grace-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Lang\he.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Microsoft Office\root\Office16\Configuration\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository_1.2.100.v20131209-2144.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.Diagnostics.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\BIPLAT.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\DBGHELP.DLL | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_F_COL.HXK | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File created | C:\Program Files\Java\jdk1.8.0_66\jre\lib\Read_Me.txt | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ppd.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-100.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\ClickToRun\i640.hash | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-pl.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-execution.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs.zh_CN_5.5.0.165303.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.css.sac_1.3.1.v200903091627.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-views.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-ul-phn.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-ul-oob.xrm-ms | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-140.png | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\bin\jstatd.exe | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\artifacts.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Common Files\microsoft shared\Stationery\Hand Prints.htm | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Spatial.NetFX35.V7.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunjce_provider.jar | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri Light-Constantia.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
| File opened for modification | C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-text.xml | C:\Users\Admin\AppData\Local\Temp\3715134609.exe | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\a.exe
"C:\Users\Admin\AppData\Local\Temp\a.exe"
C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /c start C:\Users\Admin\AppData\Local\Temp\29474.jpg
C:\Users\Admin\AppData\Local\Temp\10128.exe
C:\Users\Admin\AppData\Local\Temp\10128.exe
C:\20172306425313\winsvcs.exe
C:\20172306425313\winsvcs.exe
C:\Users\Admin\AppData\Local\Temp\3715134609.exe
C:\Users\Admin\AppData\Local\Temp\3715134609.exe
Network
| Country | Destination | Domain | Proto |
| N/A | 52.109.12.18:443 | tcp | |
| N/A | 8.8.8.8:53 | trik.ws | udp |
| N/A | 217.8.117.10:8080 | trik.ws | tcp |
| N/A | 217.8.117.10:8080 | trik.ws | tcp |
| N/A | 217.8.117.10:8080 | trik.ws | tcp |
| N/A | 8.8.8.8:53 | 304049943.ws | udp |
| N/A | 64.70.19.203:8080 | 304049943.ws | tcp |
Files
memory/1100-0-0x0000000000000000-mapping.dmp
memory/1888-1-0x0000000000000000-mapping.dmp
C:\Users\Admin\AppData\Local\Temp\10128.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
C:\Users\Admin\AppData\Local\Temp\10128.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
memory/3916-4-0x0000000000000000-mapping.dmp
C:\20172306425313\winsvcs.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
C:\20172306425313\winsvcs.exe
| MD5 | 1f8cef7b1f327e19ec561d1b80583d2d |
| SHA1 | 96795527c65711c13aef7f2cda3b5a0ff5779137 |
| SHA256 | c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6 |
| SHA512 | 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2 |
memory/4020-7-0x0000000000000000-mapping.dmp
C:\Users\Admin\AppData\Local\Temp\3715134609.exe
| MD5 | 7d52884b375ce8b6182f1c53f0f1c496 |
| SHA1 | 6b70e90b0dada8d93c61caa678e76ce2abcbc76b |
| SHA256 | 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021 |
| SHA512 | 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515 |
C:\Users\Admin\AppData\Local\Temp\3715134609.exe
| MD5 | 7d52884b375ce8b6182f1c53f0f1c496 |
| SHA1 | 6b70e90b0dada8d93c61caa678e76ce2abcbc76b |
| SHA256 | 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021 |
| SHA512 | 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515 |
memory/4020-11-0x0000000004D30000-0x0000000004DF1000-memory.dmp
memory/4020-16-0x0000000004E30000-0x0000000004EFA000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\29474.jpg
| MD5 | 4d23e02d17563f2cee703384cc846c8d |
| SHA1 | 0d76ac46acb86a861baafed1decbd30325c789e3 |
| SHA256 | c79765fd5e568441d33950403ebef264c0d6c948fb691eca90db4395dc98f911 |
| SHA512 | ff11309a7aa95616fe928fb76afdda8d7fccf23e14957f5cfbcf91a64587253bbdac6746a7d1f835d7784417fe77f9c77014e59d74cc16f08d3fe8ee64967753 |
memory/4020-24-0x0000000004E30000-0x0000000004EFA000-memory.dmp