Malware Analysis Report

2024-11-30 15:07

Sample ID 201105-81v9dzwbae
Target a.exe
SHA256 64cc82160edccda2bfd82d92b429ea0f98dcda9659a5c757b2748119847f5532
Tags
phorphiex evasion loader persistence ransomware spyware trojan worm
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

64cc82160edccda2bfd82d92b429ea0f98dcda9659a5c757b2748119847f5532

Threat Level: Known bad

The file a.exe was found to be: Known bad.

Malicious Activity Summary

phorphiex evasion loader persistence ransomware spyware trojan worm

Phorphiex Worm

Windows security bypass

Modifies Installed Components in the registry

Modifies extensions of user files

Executes dropped EXE

Loads dropped DLL

Windows security modification

Reads user/profile data of web browsers

Drops desktop.ini file(s)

Enumerates connected drives

Adds Run key to start application

Modifies service

Drops file in Program Files directory

Suspicious use of SendNotifyMessage

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Modifies registry class

Suspicious behavior: RenamesItself

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-11-05 20:58

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-11-05 20:58

Reported

2020-11-05 22:28

Platform

win7v20201028

Max time kernel

150s

Max time network

124s

Command Line

"C:\Users\Admin\AppData\Local\Temp\a.exe"

Signatures

Phorphiex Worm

worm trojan loader phorphiex

Windows security bypass

evasion trojan

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\35045.exe N/A
N/A N/A C:\120162634617678\winsvcs.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A

Modifies Installed Components in the registry

persistence

Modifies extensions of user files

ransomware
Description Indicator Process Target
File renamed C:\Users\Admin\Pictures\SetHide.png => C:\Users\Admin\Pictures\SetHide.png.ReadMe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File renamed C:\Users\Admin\Pictures\SubmitConvert.tif => C:\Users\Admin\Pictures\SubmitConvert.tif.ReadMe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File renamed C:\Users\Admin\Pictures\ConvertGroup.png => C:\Users\Admin\Pictures\ConvertGroup.png.ReadMe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File renamed C:\Users\Admin\Pictures\DenyImport.raw => C:\Users\Admin\Pictures\DenyImport.raw.ReadMe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Pictures\FindStep.tiff C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File renamed C:\Users\Admin\Pictures\FindStep.tiff => C:\Users\Admin\Pictures\FindStep.tiff.ReadMe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File renamed C:\Users\Admin\Pictures\PushReset.crw => C:\Users\Admin\Pictures\PushReset.crw.ReadMe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File renamed C:\Users\Admin\Pictures\RequestCompress.raw => C:\Users\Admin\Pictures\RequestCompress.raw.ReadMe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A

Reads user/profile data of web browsers

spyware

Windows security modification

evasion trojan
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\FirewallDisableNotify = "1" C:\120162634617678\winsvcs.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\AntiVirusOverride = "1" C:\120162634617678\winsvcs.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1" C:\120162634617678\winsvcs.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Security Center\FirewallOverride = "1" C:\120162634617678\winsvcs.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\120162634617678\\winsvcs.exe" C:\Users\Admin\AppData\Local\Temp\35045.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\120162634617678\\winsvcs.exe" C:\Users\Admin\AppData\Local\Temp\35045.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Saved Games\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Searches\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Recorded TV\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Recorded TV\Sample Media\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\AT22T7OH\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Videos\Sample Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Favorites\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Pictures\Sample Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification \??\M:\$RECYCLE.BIN\S-1-5-21-3825035466-2522850611-591511364-1000\desktop.ini C:\Windows\explorer.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Videos\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Downloads\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\8DDKLDOL\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\F6O5NPVK\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Documents\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Favorites\Links for United States\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Pictures\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\RKGIF8TT\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Admin\Contacts\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Libraries\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Users\Public\Music\Sample Music\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\explorer.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Csi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02268_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\CERTINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR46B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libimage_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\SpeechEngines\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ja.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00798_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBSBR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Microsoft Office\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01184_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OFFOWC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\visualization\libglspectrum_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00455_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR34F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLED.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0233992.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECREC.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OARTCONV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREET11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libflac_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01141_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sa.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\21.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEREP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_mr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292286.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297727.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00555_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POST.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-spi-actions.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewSelectionChanged.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107328.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14983_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EntityDataHandler.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\CURRENCY.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Journal\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\DirectDB.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ClassicPhotoAlbum.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-common.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\d3d11\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21323_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\menu_arrow.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\utilityfunctions.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEWSS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\LAYERS.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00396_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MSASCui.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Yellowknife C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01148_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02263_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME37.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\TITLE.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticattribute.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\browser\VisualElements\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101863.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18215_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Curacao C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\ColleagueImport.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCD98SP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\PROOF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\pdmproxy100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WORDREP.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\MpAsDesc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Norfolk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\platform.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241041.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01191_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\jawt.lib C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Median.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199549.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Copenhagen C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01181_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099193.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0291984.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115836.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR48B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\EST5 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\NPSWF32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UNT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01058_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_03.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RSSITEMS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OnLineIdle.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceDaYi.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console_1.0.300.v20131113-1212.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\en-US\ImagingDevices.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14997_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\ACTIVITS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SOCIALCONNECTOR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\manifest.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\MST C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\PIXEL.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado25.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01297_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7wre_en.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBHD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zaporozhye C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_sun.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR41F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Cairo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185786.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libtcp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jsse.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341551.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EAWFINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\javafx.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\clock.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Thatch.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14582_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLJRNL.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MENU.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBHED98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBARBLL.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pago_Pago C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ulaanbaatar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\en-US\jnwmon.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\WindowsPowerShell\Configuration\Registration\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tripoli C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-cli.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\La_Rioja C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Onix32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01245_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\VIBE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENVHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10O.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1STAR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01080_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0324694.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\OliveGreen.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-ui.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_alignleft.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861261279.profile.gz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\localizedStrings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107502.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0227419.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00530_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\SOLVER32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Swift_Current C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18246_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21503_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\VelvetRose.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as80.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00234_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\currency.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmplayer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Yakutat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can.fca C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\DLGSETP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_pressed.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoViewer.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Samara C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\32.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeUpdater.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_EN.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-startup.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup-impl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msador15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\vocaroo.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBE7INTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105380.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PPINTL.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+2 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msmdsrv.rll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153398.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Khartoum C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javaws.policy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows NT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Canary C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libx265_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00130_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00382_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR29F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDREQL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewFrame.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBHOME.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\3.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee100.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_FR.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00468_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsMacroTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GIFT98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_sse2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdaterInstallMgr.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\RICEPAPR.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Whitehorse C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sq\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\updater.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD06200_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195788.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ContemporaryPhotoAlbum.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multitabs.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\am\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\browse_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\SY______.PFB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\BillingStatement.xltx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\add_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\jvm.lib C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Brunei C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACEDAO.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-loaders.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nn\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02413_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14578_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATALOG.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\master_preferences C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-spi-quicksearch.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00038_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\CALENDAR.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGATNGET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-nodes.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jfxmedia.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XOCR3.PSP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.bfc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107492.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00050_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0298653.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BANNER.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\logger\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadco.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_06.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR6B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CONTACTINFOBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt_1.1.1.v20140903-0821.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-uihandler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\VSTARemotingServer.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME44.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcor.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONLNTCOMLIB.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL077.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\SAVE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management-agent.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_zh_CN.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01734_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\+Connect to New Data Source.odc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\sRGB.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Oarpmany.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\VBAJET32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\INDUST.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OutDomain.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS0009.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-util.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tongatapu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\SPRING.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153302.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\drive.crx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL110.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\FLTLDR.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ast.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\cmm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\cpu.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_email.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384862.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14791_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jawt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\6.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293234.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\messageboxalert.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-api-visual.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGZIP.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107742.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107148.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01332U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\wxpr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSClientManifest.man C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTBOX.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\gu.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_es.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\ext\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Tulip.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151067.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME28.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR7B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB3B.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ta\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\status.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libfingerprinter_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBORDER.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Copenhagen C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\info.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Nicosia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR30F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00223_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.InfoPath.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Gaza C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\PhotoAcq.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\BG_ADOBE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.commands_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_th.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01015_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382965.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\setup_wm.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadcer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\1 Top.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)greenStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_TW.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\JavaAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\en-US\JNTFiltr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107468.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OutSyncPC.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hy.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\PAPYRUS.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185670.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\msproof7.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\47.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-io-ui.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Helsinki C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Discussion14.gta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AD98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.cpl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cancun C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.log C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRdIF.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterApplicationDescriptors.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\RELEASE-NOTES.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msadomd.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR20F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\SDK\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows NT\Accessories\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CLIP.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152568.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21304_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIconsMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\setup.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB1B.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Athens C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libqsv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\slideShow.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\13.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Manila C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Detroit C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\TALK21.COM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\corner.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Luis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpAsDesc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDownArrow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FS3BOX.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-threaddump.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-remote.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Goose_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEWSTR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\CANYON.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00433_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-windows.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105398.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Document Themes 14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Black Tie.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR10F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cuiaba C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART4.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_choosecolor.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOHEVI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONBttnWD.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01040_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00918_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RECL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.EPS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\Ole DB\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Havana C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\DumontDUrville C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Rarotonga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvSOFT.x3d C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285698.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-windows.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\masterix.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\release C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\ResizeTrace.cab C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libskiptags_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEEXCL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10290_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fr.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Colombo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\psfontj2d.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861258748.profile.gz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_ok.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Vienna C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086428.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\OCEAN_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME46.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\DRUMROLL.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessData.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107188.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00640_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115864.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\rtstreamsink.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Guam C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\daisies.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107316.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341654.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cs.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02313_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECRECS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN108.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\fontmanager.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Jamaica C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02028_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ro.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLPERF.INI C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR9B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MIMEDIR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7ge.kic C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\HEADINGBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0195812.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.concurrent_1.1.0.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libaom_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Defender\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Memo.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1XTOR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Music.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\TAG.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102002.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10289_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\SHOVEL.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\PDXFile_8.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiling.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrowMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\Accessories\WordpadFilter.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jvmti.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\softokn3.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SendMail.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Cape_Verde C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Eucla C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03453_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01749_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149887.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EXSEC32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guyana C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javafxpackager.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs-nio2.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Chisinau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\dialogs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18216_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\youtube.crx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\LATIN1.SHP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21370_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Temp\GUMCEA4.tmp\GoogleUpdateSetup.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199283.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADVZIP.DIC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CreateSpaceImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\apt.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msador15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR32F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Adjacency.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Oriel.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\currency.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18242_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Kiev C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0179963.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\TOOT.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\timeZones.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\slideShow.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0221903.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\default.vlt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00828_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21310_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-13 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_de_DE.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Module.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\HEADING.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\access-bridge-64.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Media Player\Visualizations\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)greenStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00462_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10264_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSRuntimeUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABOFF.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-11 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00270_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00505_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository_1.2.100.v20131209-2144.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-windows.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-favorites.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195428.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02426_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115839.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\STARTUP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tallinn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\JdbcOdbc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00122_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107300.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FRENCH.LNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL089.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thule C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EMSMDB32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Denver C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nb.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\features\[email protected] C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\18.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\mip.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Scoresbysund C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL105.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGDOTS.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLOGO.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\JavaAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\msvcp140.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\RE00006_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115866.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099201.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00512_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0195534.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Winnipeg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215070.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Juan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libsftp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\MOFL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00334_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdasql.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\axvlc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql90.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198494.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01161_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\SHOT.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sitka C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_olv.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0177806.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\AddToViewArrow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_OliveGreen.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)alertIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\msitss55.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178459.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKUPD.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic\DEFAULT.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.Adapter.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Perspective.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR8F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\IA32.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105238.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-text.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadcor.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\DiagnosticsTap.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\NL.ROGERS.COM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\MSBuild\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libsid_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00625_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Brussels C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\MSOERES.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185790.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB7.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PULLQUOTEBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\oledbvbs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02270_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_GreenTea.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\accessibility.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Godthab C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port_of_Spain C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR39F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21303_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SOA.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\verify.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\mraut.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ms.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_pl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Midway C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105412.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386764.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\3.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\features\[email protected] C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\RICEPAPR.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\TRANSMRR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\ViewHeaderPreview.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\messageboxerror.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PPSLAX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Reunion C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105378.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Installed_schemas14.xss C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\BLENDS.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Dotted_Line.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241773.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLowMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\PowerPointMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR5B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR26F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Riga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0315447.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONGuide.onepkg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\US_export_policy.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ViewerPS.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02437_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR38F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21330_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\IPOLKINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+6 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01657_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01172_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02793_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02187_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21326_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-8 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR17F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\IMAGE.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-ui.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado27.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NAME.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL010.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SSGEN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Services\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_fr.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SCNPST32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Eurosti.TTF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\updater.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00172_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0314068.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\README.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msadox.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05665_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Internet Explorer\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21433_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.KR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0090386.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ckb\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ps\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR22F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\DELIMWIN.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN054.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\CIEXYZ.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sampler.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\LICENSE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\error_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00563_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB2B.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297229.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.InfoPath.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\prism-d3d.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Resolute C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00941_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00330_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePage.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spl.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\features\[email protected] C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Equity.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsVersion1Warning.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATWIZ.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\VSTAClientPkgUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304853.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Category.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090089.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153095.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212685.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Charitable Contributions.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MST C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\add_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00693_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novosibirsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ky\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04108_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Form.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\back.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\psfont.properties.ja C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\core.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10266_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OLKIRM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ta.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor_1.0.300.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Irkutsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)redStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_super.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OWSCLT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00010_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02267_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02228_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0186348.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\WidescreenPresentation.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\sunjce_provider.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH00780U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Martinique C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiling.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ACE.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106020.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0289430.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\OUTDR_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\libEGL.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Acrofx32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14754_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21325_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\ORG97.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\fxplugins.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TextConv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.HLP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01394_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\dependentlibs.list C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SPACE_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MOR6INT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTIT.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN026.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_uk.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\warning.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00914_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382959.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285820.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIcon.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Monterrey C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterRegular.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Rome C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\icucnv36.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericonMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\zip.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\3.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01635_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\IconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\PersonalContact.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\library.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)alertIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00560_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Projects.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\br\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\wmpnetwk.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mousedown.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\SATIN.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql2000.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107748.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcf.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\LoginForm.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287417.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR44F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Issues.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\redStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\javafx.policy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01084_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04323_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0252629.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00737_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01298_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLBAR.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\ODBCR.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_increaseindent.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Kerguelen C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\update-settings.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03143I.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBOXES.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Managua C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\skchui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10255_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BULLETS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14711_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\IPML.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\COIN.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\corner.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0175428.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15061_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10307_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONTACTL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Priority.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+3 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Boise C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Knox C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\profilerinterface.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Antarctica\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00345_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149627.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\kcms.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR43F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18205_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\18.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\wabmig.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\glib-lite.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\mpvis.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kuching C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\InkDiv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152688.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BORDERBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Real.mpp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\ExcelMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382955.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR9B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\STOPICON.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00184_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00121_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN095.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Tabs.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Taipei C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00126_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN011.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Qatar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00438_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECURL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\Xusage.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187861.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00483_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImagesMask16x16.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Msgbox.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\my\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Foundry.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02066_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZDAT12.ACCDU C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7es.kic C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\35.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Hermosillo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-search_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-core.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Elemental.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\daisies.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdaps.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\IRIS.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382950.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME18.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Irkutsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14654_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RESENDS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\charsets.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.HOL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\WSS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099180.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePage.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIconsMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00792_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PNCTUATE.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SEQCHK10.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\22.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_pt_BR.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\InfoPathMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Horizon.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\SettingsInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\an\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SWEST_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\Content.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\WMM2CLIP.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\jmxremote.password.template C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15060_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmlaunch.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\va.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\HLS.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01064_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RECS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\15.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.SG.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZCARD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Kosrae C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\VERSION.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\anevia_xml.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00768_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WHIRL1.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Aspect.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293236.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OISINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-spi-actions.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\DESIGNER\MSADDNDR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02388_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0235241.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.contexts_1.3.100.v20140407-1019.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152608.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341554.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\msadc\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.identity_3.4.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmpenc.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_same_reviewers.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00202_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0149018.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Foundry.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Assets.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\jaccess.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jli.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\plugin.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME41.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NL7Lexicons0011.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Portal\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD05119_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02293_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_top.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\config.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Routing.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285750.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\CollectSignatures_Sign.xsn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL011.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382963.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00231_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21318_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Galapagos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\application.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATALOG.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe.config C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187829.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183328.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTVIEW.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIconsMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jfxwebkit.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\javafx-doclet.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\libvlc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\ODeploy.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02054_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10254_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\kn.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0214098.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Blanc-Sablon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ro.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382958.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\GRIP.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\GRAY.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18185_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\RSWOP.ICM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh88 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14768_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Uninstall Information\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-charts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\blank.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00170_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107282.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\en-US\PDIALOG.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Slipstream.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0217698.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OMSINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\8.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\NBMapTIP.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107514.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME30.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sk.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\WMPMediaSharing.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\22.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.es\Proof.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Novosibirsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Samara C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292248.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0302953.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\UrbanFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jce.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01661_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0336075.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHD98SP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Executive.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15185_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search5.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GreenTea.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\PublicFunctions.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows NT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\UCT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtospdif_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00390_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHD98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\tzmappings C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Mazatlan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04384_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196110.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Teal.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado20.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\de.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-windows.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\ConnectionManager.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\APPLAUSE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN027.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\boot_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Mexico_City C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Beulah C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Angles.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\hprof-16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Indian\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityMergeFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Budapest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\MTEXTRA.TTF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241019.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Catamarca C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153089.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0282932.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Median.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OTKLOADR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART7.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Davis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\7.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18192_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Skins\Revert.wmz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\servertool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql_2.0.100.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\2 Right.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Slipstream.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21312_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cancun C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00394_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01243_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NL7Models0011.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB4.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PICTPH.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\SecretST.TTF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rightnav.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpSvc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\GrooveMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297185.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OUTEX2.ECF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Accessibility.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\msaccess.exe.manifest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Recife C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Pitcairn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Saipan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateSetup.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Mozilla Maintenance Service\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_top.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicTSFrame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-actions.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FSTOCK.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL081.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\management.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\removed-files C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18181_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10336_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-compat.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Portal\PortalConnectCore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mazatlan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00146_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_MoveDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-vertical.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195254.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\meta\reader\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR10F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EXLIRMV.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\form_edit.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-favorites.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\ir.idl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_floating.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00336_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\SignedManagedObjects.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Rothera C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt55.ths C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00546_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152894.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02522_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\IA2Marshal.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libvcd_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODEXL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02091_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\SUBMIT.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341653.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH00601G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\16-on-black.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeXMP.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.server_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kabul C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\add_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_pt-BR.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02750G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02051_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdaprst.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACETXT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QRYINT32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\glass_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\17.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Paper.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Center C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185776.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239975.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234131.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\DELETE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+4 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212601.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1036\MSO.ACL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0315612.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21427_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Groove Starter Template.xsn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00346_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107718.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14832_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\PublicFunctions.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_it.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS000C.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\46.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveResume.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Porto_Velho C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Flyout_Thumbnail_Shadow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DOCS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignright.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLVBS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-api.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHLTS.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Metro.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-print.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-compat_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows NT\Accessories\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03795_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BDRTKFUL.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\day-of-week-16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImages256Colors.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_elf.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\koreus.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200273.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\WWLIB.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\45.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\AUTHOR.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\RIPPLE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_off.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\42.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105376.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\YEAR.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ko\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msdarem.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18184_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART9.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\id\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libmmdevice_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanReport.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pidgenx.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00166_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Manuscript.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-hot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Default.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_partstyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Tirane C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msdaremr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Danmarkshavn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\SERVWRAP.ASP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\ui.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02400_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ADD.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Casey C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macHandle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Pyongyang C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086426.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02740U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02742U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7tk.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kathmandu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Perspective.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18210_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VS_ComponentSigningIntermediate.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00319_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\sawindbg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01151_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02233_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+10 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-queries.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\penchs.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoCanary.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libreal_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_drop_shadow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sw.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\JdbcOdbc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02115_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB8.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEB11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jp2launcher.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Bougainville C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00090_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105294.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Anadyr C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-text.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Aspect.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Origin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309567.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_07.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\FLASH.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-hot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\VISSHE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\it.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\gmail.crx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-favorites.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONELEV.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\SPACER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\slideShow.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security_1.2.0.v20130424-1801.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\MSBuild\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182902.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCVDT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\12.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\create_form.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198113.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME50.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\localizedStrings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)redStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Black Tie.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Austin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fi.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\Microsoft.Ink.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187881.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0318810.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02448_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSRETRO.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Clarity.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR00.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Sitka C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOff.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Darwin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MsMpCom.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\EScript.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\ieproxy.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188679.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Noumea C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Sort\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\MDIParent.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDRESP.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.security_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\accessibility.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Dawson_Creek C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\cpu.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)notConnectedStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00095_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Nairobi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-awt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Waitcursor.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00233_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152558.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ahclient.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\java.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Media Player\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200189.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00476_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBARBLL.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04332_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00019_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Thimphu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Fiji C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02386_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\History.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libau_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-desk.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\MSMAPI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\EXPEDITN.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Black Tie.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKDEC.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PRTF9.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\AUTHZAX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\eu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\xmlrw.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187835.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR45B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OMSXP32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\Ole DB\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Media Player\Icons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.Office.Tools.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\en-US\Sidebar.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\jni_md.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Puerto_Rico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00046_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\5.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Vincennes C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACEODBCI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CLVIEW.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hu.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00726_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OSPP.VBS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\DiagnosticsTap.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\gui\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Journal\Templates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00333_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0215086.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14769_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183198.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\iedvtool.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186346.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryNewsletter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_nv12_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02753U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0332364.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Damascus C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02075_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107426.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14538_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Palau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libxa_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00200_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301044.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUCRES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\Presentation Designs\Maple.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Blog.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_de.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0205462.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectStatusIcons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\DataSet.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\activity16v.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\Client.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_120.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\ct.sym C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00186_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB5B.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\nssckbi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.el_2.2.0.v201303151357.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\tesselate.x3d C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\FDFFile_8.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Metro.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ADRESPEL.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\jsdebuggeride.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\ffjcext.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\validation.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188511.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEWBY.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\20.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\descript.ion C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR15F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLFLTR.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382952.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115835.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\SPLASH.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_bkg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-1 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpCommu.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Essential.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART12.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado21.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\mux\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOICONS.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101867.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpCmdRun.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00688_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00257_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SlateBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs-nio2.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00120_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolImages16x16.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\GRAY.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyReport.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jabswitch.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bg\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_lt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sk.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02417U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00286_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\wabmig.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Godthab C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183172.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00810_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01139_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\es\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Warsaw C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_05.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00642_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmpenc.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl-hot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304371.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\th.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ug\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODDBS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_justify.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\meta-index C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR9F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIcon.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\WHOOSH.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WSIDBR98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\Accessories\en-US\wordpad.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QP.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-8 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01434_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00919_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152570.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00152_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285444.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Juan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORTL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15274_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\uninstall\shortcuts_log.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212957.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14515_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14794_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA000A.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME38.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ALERT.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21297_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\pdm.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\classes.jsa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightItalic.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15171_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0197983.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\t2k.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado21.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado28.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01143_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\ffjcext.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\flavormap.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\slideshow_glass_frame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14514_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\ITIRCL55.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00042_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Nairobi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belize C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Paris C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Berlin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CHECKER.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00513_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090027.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Tegucigalpa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMARQ.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313965.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\PNG32.FLT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_bottom.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\notConnectedStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfr\profile.jfc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00184_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ACTIP10.HLP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-dock.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cuiaba C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-io.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libtimecode_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIconsMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Stationery\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-api.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\AdobeID.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\EEINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadomd28.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\mojo_core.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Casablanca C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCARD11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Apothecary.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_off.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\20.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\include\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Office 2.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01805_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SplashScreen.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse_1.1.200.v20140414-0825.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215718.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Thule C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.RSD C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msjro.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdatl3.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MST7MDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\policytool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105348.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSQRY32.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_justify.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\rtstreamsource.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Executive.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Perth C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\ImagingDevices.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\glass.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeAUM_rootCert.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\GreenBubbles.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRLEX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\REFEDIT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00629_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-filesystems.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Oriel.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PPTIRM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Ojinaga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\skins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0186002.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME35.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-annotations-common.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Wallis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107350.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR34B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\1033\Synchronization.rll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Volgograd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee100.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382968.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00241_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ADD.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\11.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\et\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Boa_Vista C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02453_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\INDOMAIN.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Qyzylorda C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\mix.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvm.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297269.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR6B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24ImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.VN.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_italic.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\EPSIMP32.FLT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185818.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\excelcnvpxy.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\BG_ADOBE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0158071.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginReport.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eo.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guatemala C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Chita C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\PDFFile_8.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp_3.6.300.v20140407-1855.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\mobile.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\en-US\WinMail.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187839.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR18F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jmc.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099170.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00531_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBOXES.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgePackages.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\libxslt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR14F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WORDREP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\ij C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server-15.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\en-US\WinMail.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\86.0.4240.111.manifest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tokyo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\main.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\pdf.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDREST.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libpng_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\init.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01164_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.PL.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105234.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105496.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Catamarca C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\en-US\sbdrop.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01474_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02291U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dialog.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\34.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Pipeline.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MsMpLics.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152696.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Gibraltar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jpeg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\unpack.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\CAPSULES.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099145.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CATWIZ11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR48F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.TLB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\IETAG.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02390_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SETLANG.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\slideShow.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-impl.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libmicrodns_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\JNWDRV.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\Microsoft.Ink.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00086_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01035U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\THOCRAPI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\wmpnssui.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287645.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\NUMERIC.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OISGRAPH.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\management\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Louisville C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\extensions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152722.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BROCHURE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\j2pcsc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Samarkand C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106222.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Nassau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-api.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CLASSIC2.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR3F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\gfserrorfromgroove.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\LoanAmortization.xltx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Panama C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zh_TW\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\d3d9\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_spellcheck.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jdb.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\mc.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fontconfig.properties.src C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\calendar.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateHelper.msi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Adjacency.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB3A.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\SEAMARBL.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg_orange.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInAcrobat.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297725.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00168_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Oriel.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdaprsr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\gfserrortogroove.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PPINTL.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FLAP.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\external_extensions.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\gui\libqt_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03011U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14833_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\greenStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\library.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPOlive.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\de\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PROG98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Wordcnvr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00076_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Elegant.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg_sml.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\glass.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Seoul C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099159.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0227558.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18187_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\pack200.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\kk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mousedown.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199036.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYVERTBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\37.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152892.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21435_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows NT\Accessories\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bangkok C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Media Player\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\RADIAL.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240291.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18233_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME02.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcecompact35.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\si\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR17F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR45F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR6F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0250504.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05869_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\en-US\OmdProject.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196142.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0093905.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10299_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15021_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableUpArrow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fr.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\com.jrockit.mc.console.ui.notification_contexts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-1 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08808_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\MMSS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyMergeLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UCT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02025_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+9 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Eirunepe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\CsiSoap.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\SPRING.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145895.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01253_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02062U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237759.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Metro.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLSERVER.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\kn\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-plaf.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\d3d11\libdirect3d11_filters_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\reflow.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\form_responses.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierCloseButton.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SketchPadTestSchema.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SLERROR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN010.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBOB6.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gu.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00057_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Maroon.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\FPEXT.MSG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ext_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_70.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02752U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\3082\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rankin_Inlet C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\da\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\MessageBoxIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.IN.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AssemblyInfoInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw120.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107266.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-CN.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\he.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Rangoon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CNFNOT.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\audiodepthconverter.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\JSByteCodeWin.bin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Data1.cab C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18193_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKDECL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABON.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\To_Do_List.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239935.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSSPC.ECF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\BG_ADOBE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.SqlServerCe.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\java.security C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ust-Nera C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\eula.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\weblink.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSO.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237225.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0298897.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMaskSmall.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jerusalem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\indxicon.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\bg_sidebar.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0090070.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\msoe.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yakutsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ja.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Casablanca C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.actionProvider.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239941.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.preferences_3.5.200.v20140224-1527.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\packetizer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0233512.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)grayStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\alertIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montevideo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Filters\odffilt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21320_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.STD C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Library\EUROTOOL.XLAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLMAIL.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\PRODIGY.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-uihandler.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfont.properties.ja C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novokuznetsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_basestyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\pack200.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\zy______.pfm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00453_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0233312.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\bundles.info C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\access\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153093.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178639.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0292152.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14530_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\dt_socket.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Earthy.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ko.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tashkent C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\jsdbgui.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-enumerations.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Sao_Paulo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\he\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Services\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\native2ascii.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\PDFSigQFormalRep.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_gu.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00092_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Hardcover.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Services\verisign.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\localizedSettings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\picturePuzzle.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\ACTIVITY.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OMSMMS.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL020.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\LICENSE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Mso Example Intl Setup File B.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0158477.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01219_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21390_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115855.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\WMPDMCCore.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME24.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\Client.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR3B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Marquesas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02278_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00633_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarViewButtonImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.ibm.icu_52.1.0.v201404241930.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.logging_1.1.1.v201101211721.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-appui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libjpeg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WITHCOMP.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8PDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jayapura C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-options_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\librecord_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02127_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_justify.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sr.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\skins\fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152626.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-print.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200521.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0202045.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00735_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\37.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.css_1.7.0.v201011041433.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-visual.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\6.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmprph.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00965_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pt_BR.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152610.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239611.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14753_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RSSITEML.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\nacl_irt_x86_64.nexe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL083.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Auto.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\dt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ka\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\newgrounds.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\BRANDING.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00602_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285780.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\en-US\oledb32r.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Origin.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AUDIOSEARCHLTS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\ACADEMIC.ONE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-api-caching.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0196400.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Tucuman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-util-enumerations.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0293832.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME20.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7en.kic C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBOX.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLINACC.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\METCONV.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0098497.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Managua C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tehran C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Grid.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OISAPP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00177_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02423_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00308_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLN.XLS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBrowserUpgrade.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OCRVC.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Salta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\JNTFiltr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EURO\MSOEURO.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01923_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21294_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net_1.2.200.v20140124-2013.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-core-kit.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Mso Example Setup File A.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01168_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107450.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\rmid.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\triangle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Earthy.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Resource.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Vevay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01163_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200163.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\El_Aaiun C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Internet Explorer\SIGNUP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\jsdbgui.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0150150.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01295_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02214_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Vilnius C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00395_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR31B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MENU98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-compat.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\promointl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185798.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMIMEE.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\default.jfc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPHandle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Belem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Groove.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19563_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115865.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_On.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105286.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado27.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLAPPT.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Address.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\avtransport.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Earthy.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182888.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Media Renderer\DMR_48.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\main.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00526_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152600.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\BCSLaunch.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200289.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02288_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24ImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01167_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins_1.1.200.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\SC_Reader.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\schemagen.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02567J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16ImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielResume.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101865.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Media Renderer\connectionmanager_dmr.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_nl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00231_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188519.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02738U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115840.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MENU.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\41.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSTORES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00726_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01750_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WNTER_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE.MANIFEST C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Defender\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Comments.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Montreal C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Curacao C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\London C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\main_background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182898.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238927.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00238_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Vevay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Mail\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21527_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Omsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VGX\VGX.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18204_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Detroit C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\3.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\BLUECALM.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01176_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Currency Rates.iqy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\vlc-48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-awt.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285822.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\DAO\dao360.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02198_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MAIN.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tehran C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-execution.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdater.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187847.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02756U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdfmap.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Khandyga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00159_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL086.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fur.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-dialogs.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_sml.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01160_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02085_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCallbacks.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099152.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14655_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3FR.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BS4BOXES.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-fallback.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\uk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384895.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\NOTEL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoBeta.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fur\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\Office64MUISet.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00343_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\preface.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\THANKS.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02124_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsFormTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LINEACT.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107138.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107090.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Document.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\TEAROFF.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_hu.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-spi-quicksearch.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382938.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02431_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIcon.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Wordconv.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uk.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00693_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Green Bubbles.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.command_0.10.0.v201209301215.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Tijuana C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\networkinspection.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00345_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR51B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado26.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\codec\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341475.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-snaptracer.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\CrashReports\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00233_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es-419.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Jujuy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Canary C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\CET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\logsession.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\ICE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_LightSpirit.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\macroprogress.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\NOTEBOOK.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGDOTS.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Teal.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\TimeCard.xltx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_sml.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153265.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0213449.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsViewAttachmentIcons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft.NET\RedistList\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00242_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net_1.2.200.v20120807-0927.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00012_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21314_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FORM98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\updater_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PULQOT98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Tasks.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_cycle_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\pdm.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_SlateBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\11.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ust-Nera C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\WMPNSSUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\BLUECALM.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0296277.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21316_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\manifest.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\splashscreen.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtobe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zh_CN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_browser.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdasql.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\Filters\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152898.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Inuvik C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Broken_Hill C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\journal.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)redStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_center.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_bottom.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Hand Prints.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400003.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\THOCR.PSP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Packages\Debugger\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libwav_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CSD C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\VERSION.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\Mso Example Intl Setup File A.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_On.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0315580.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01126_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099182.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL102.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guayaquil C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Araguaina C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Glace_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Port-au-Prince C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD10972_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\cacerts C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielReport.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\WinMail.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\38.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\4.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Mahe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR2F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\VSTAProjectUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\3RDPARTY C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\sunmscapi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\MSB1ESEN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107724.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\BG_ADOBE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\psmachine.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14677_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART13.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libmft_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107342.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00656_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\+NewSQLServerConnection.odc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Issue Tracking.gta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\localizedStrings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\wabimp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libts_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD07804_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285796.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-tw.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21324_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\REVERSE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Bissau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\tools.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Juneau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_top.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLIST.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.c C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Country.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\info.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\InformationIconMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Saipan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Ceuta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Easter C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\cpu.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Identity-H C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00559_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\bdcmetadata.xsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR29F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations_2.4.0.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-services.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Africa\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Acrobat\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSStr32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\localedata.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\calendars.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185834.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ml.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msader15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\resources.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ru\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00261_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086420.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285462.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_48.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt-br.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01740_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBrowserUpgrade.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MAPIPH.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Auckland C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152628.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01292_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Concourse.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\FAXEXT.ECF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZFORM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Menominee C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\SalesReport.xltx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lv.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jinfo.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\ktab.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Apothecary.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_100_percent.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Boa_Vista C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OFFOWCI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_sv.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Anchorage C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCOUPON.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SAEXT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\WMPDMC.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\VC\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base_4.0.200.v20141007-2301.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187883.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR24F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Malta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14513_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGNAVBAR.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightRegular.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_flyout.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR41F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Media Player\Media Renderer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-sendopts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\browser\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Broken_Hill C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10265_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-tabcontrol.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ERROR.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Singapore C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.TH.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ne.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2ssv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Nauru C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Srednekolymsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Search.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\msadc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02439_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00139_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01179J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_SlateBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPQUOT.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BUSINESS.ONE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Internet Explorer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Los_Angeles C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01039_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19695_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313896.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_disable.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\snmp.acl.template C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04225_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Adjacency.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\javaws.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-attach.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sampler.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\CST6CDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\en-US\wab32res.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSWDS_ES.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099181.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REMOTEL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00013_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\Accessories\wordpad.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01186_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Visualizer.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspatialaudio_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sendopts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15072_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01255G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\flyout.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00052_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0318804.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00538_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02356_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02752G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299125.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\F12Tools.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\PIXEL.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ACWIZRC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME31.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR5F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPreviewTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jp2ssv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Response.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\com-sun-tools-visualvm-modules-startup.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libwin_msg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLSTL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Abstractions.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\MST7MDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Monticello C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_pitch_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_Undocked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00273_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00116_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR27F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_left.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\tnameserv.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\SLATE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Clarity.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XLSLICER.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL026.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152704.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00416_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\LoginTool24x24Images.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfigInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Thimphu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01358_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02371_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jpeg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\EST C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00364_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0286034.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21298_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLN.PPT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\extcheck.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\IntroducingPowerPoint2010.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0234376.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BLANK.ONE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_winxp.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\tzmappings C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Media Renderer\DMR_120.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SaveAsRTF.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099160.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00231_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\Triedit\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Lagos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Gaza C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\micaut.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Solstice.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jdwp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105246.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\af.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\control\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSAIN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierDisableDownArrow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\SessionOwner.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\clock.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Thunder_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\zx______.pfm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\PortalConnect.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107482.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028191328.pma C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Lagos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multitabs.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\javacpl.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\FM20.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151061.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18219_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_alignright.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\hprof.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216112.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\iedvtool.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00452_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02045_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.Tools.Applications.Project.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\PhotoAcq.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Fakaofo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libg711_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\23.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04174_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00494_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10219_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Merida C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageAttachmentIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GreenTea.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Foundry.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Newsprint.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Jujuy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Luxembourg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14757_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RES98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FPERSON.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL093.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FINCL_02.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR33F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\tnameserv.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\BLUEPRNT.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHPHN.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianMergeLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\currency.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssLogo.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107512.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper_1.0.400.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\EURO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00736_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14528_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\APPTL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyResume.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\DESIGNER\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OSPP.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Abstractions.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0177257.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00014_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL103.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-progress.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Microsoft Office\Office14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Stockholm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21518_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.BusinessData.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IPDESIGN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OWSSUPP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_HK.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kamchatka C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libmod_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Temp\GUMCEA4.tmp\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Vladivostok C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MP00646_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ProjectStatusReport.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\highDpiImageSwap.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152560.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\CLVWINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GB.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsColorChart.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh88 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\jnwppr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\RSSFeeds.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Efate C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bg.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01745_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.InfoPath.FormControl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Oriel.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152702.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.security C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Chagos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Gradient.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00703L.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSClient.Msg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECURS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\9.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Black Tie.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.JP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\Timeline.cpu.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Events.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\calendar.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR40F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Manaus C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Thunder_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\fxplugins.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301252.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\MENUS.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\cursors.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdasqlr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00442_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-api.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroSign.prc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IPIRM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\STINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\MSB1ARFR.ITS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21340_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_fr.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00260_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART15.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\PicturesToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqloledb.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00267_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FORM.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\SystemV\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ALRTINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00438_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099156.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187819.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\micaut.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.IDX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107132.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\7.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-explorer.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hu.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Galapagos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107456.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\OFFISUPP.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240811.profile.gz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10253_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_extended.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kosrae C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Davis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEERR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\PersonalMonthlyBudget.xltx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\WMPDMCCore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107496.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\TexturedBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Urumqi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Maceio C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fil.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115843.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\STSUPLD.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginResume.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\SLATE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateCore.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21334_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME11.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR16F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tbilisi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEWDAT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01838_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\stdole.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\1.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfxrt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libstereo_widen_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Portable Devices\sqmapi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0300840.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\messageboxinfo.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\ClearExit.shtml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-oql.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\en-US\Sidebar.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00172_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\mshwLatin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14565_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4_1.0.800.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SIGN.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152590.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Clarity.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PG_INDEX.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099153.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0149118.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSAEXP30.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0213243.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14830_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPOBJS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\intf\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MAPISHELL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\OutUnpublish.tiff C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR46F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Paramaribo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Sofia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yerevan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00454_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BROCHURE.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-filesystems.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jvm.hprof.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Microsoft Office\Office14\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\libmosaic_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Tell_City C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\librss_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_04.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ADD.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tt.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MSTHED98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0295241.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\Whistling.wav C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\4.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00097_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Maldives C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Jamaica C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15169_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Public_Primary_CA.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessData.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chicago C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\sqlxmlx.rll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBHD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ExpenseReport.xltx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\weather.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)grayStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\db\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00668_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ERROR.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Chatham C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-heapwalker.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04206_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00352_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIconMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsound.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBRPH1.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\MpClient.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\StatusDoNotDisturb.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\psmachine_64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304405.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02361_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Aspect.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14980_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01291_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GKPowerPoint.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-heapwalker.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\SoftBlue.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0214948.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01300_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0287005.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libdav1d_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\row_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\PAPYRUS.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185800.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18250_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SCANPST.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\liba52_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\settings.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00010_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Essential.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IPEDITOR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\oisctrl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SettingsInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\osclientcerts.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\flyout.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\ECHO.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01840_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Couture.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\rmiregistry.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.war C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Windhoek C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLTASKR.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ie9props.propdesc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libaribsub_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSCONFIG.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanResume.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME48.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_Off.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14829_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239953.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05870_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONBttnOL.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSLaunch.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft SQL Server Compact Edition\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0300862.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232171.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0318448.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10263_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Palmer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Chuuk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102594.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\HAMMER.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB11.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\verify.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWRECS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-api-caching.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile_browse.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libes_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0171847.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GFX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+12 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MLSHEXT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Angles.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLACCT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianMergeFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\networkinspection.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19828_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341534.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199755.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Krasnoyarsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Thawte Root Certificate.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086478.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.attach_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Midway C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0278882.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-9 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\uk\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18203_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCD98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\YST9YDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285782.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00898_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02253_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\orb.idl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00459_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mouseover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01130_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\VIEW.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.chm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Adelaide C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXPTOOWS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN044.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\external_extensions.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Rome C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341636.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02039_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Newsprint.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\WORDIRM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\npdeployJava1.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jce.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\defaults\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090783.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182946.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\rmiregistry.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14996_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313970.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Edmonton C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01629_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-options_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ast\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tarawa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OSETUP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_italic.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceYi.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\io.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Menominee C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Winnipeg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ga\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msolui100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\21.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341448.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands_0.10.2.v20140424-2344.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\klist.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.THD C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXPSRV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21512_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCDDSLM.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.jdp_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Palau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0217872.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287641.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183168.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ga.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mouseover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yakutsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\view.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099196.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105388.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SOCIALPROVIDER.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms_3.6.100.v20140422-1825.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Beige.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FPLACE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Makassar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Currie C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_Off.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Belize C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-bootstrap.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\el\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_zh-TW.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqloledb.rll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Luxembourg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\HST10 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychartplugin_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fontconfig.bfc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\AFTRNOON.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\back_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0234001.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDREQS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCD11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dhaka C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\F12Tools.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00405_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02740G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR8B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_VelvetRose.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TaxonomyControl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer_3.2.200.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-annotations-common.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0217302.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00268_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285360.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MCPS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHDHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0164153.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Settings.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\README.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14844_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\jamendo.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libt140_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341559.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESPS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lij.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105336.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198016.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Flow.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR4B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_center.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\14.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Fortaleza C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msadrh15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PAPER_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0305257.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageSlice.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\extensions\VLSub.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\OPTINPS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099146.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400004.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Details.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102984.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198021.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME42.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZUSR12.ACCDU C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\wsimport.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME01.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART6.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\EXITEMS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wake C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187647.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03464_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENV98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157177.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABELHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0217262.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149481.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Process Library.fdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\dummy.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287415.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Checkers.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\Ole DB\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200467.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01468_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\TOC98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\greenStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1655.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Port_Moresby C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\cue.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tr.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveReport.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\net.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090781.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00256_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESNS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfo.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\29.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\SelectSave.rtf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106124.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18214_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLWVW.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.commons.codec_1.6.0.v201305230611.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw32.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB01741L.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AGM.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195342.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200377.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00391_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01252_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0252349.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\currency.data C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR46B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Austin.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GreenTea.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\wabfind.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-io-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sl.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Honolulu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01472_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\button.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)grayStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02389_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02276_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00253_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN089.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187815.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\java-rmi.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_MoveNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ospintl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONFLICT.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT98SP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\AcroRead.msi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200151.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME27.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Premium.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Gambier C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\OneNoteMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309904.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Groove.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\MANUAL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00641_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\clock.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Chicago C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_is.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\skin.dtd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01759_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSSKETLG.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\PINELUMB.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\MSOERES.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-PT.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\npvlc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_stats_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18196_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWSTRUCT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.filetransfer_5.0.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicHandle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-queries.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroTextExtractor.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106208.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrowMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\grayStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00687_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00779_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234687.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\RenderingControl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadox28.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\Timeline.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\CST6CDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Reference Assemblies\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceYi.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSSKETSM.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-12 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\VideoLAN Website.url C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\cryptocme2.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\STUDIO.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105360.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00525_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01566_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-execution.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKACC.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01954_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281243.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01235U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14692_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14870_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\VBAOWS10.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\EmbeddedView.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\LISTBOX.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-util-enumerations.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-core.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Metlakatla C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ru.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\XDPFile_8.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00932_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR33B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\RPT2HTM4.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\month.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01842_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\SectionHeading.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\calendar.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099200.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_09.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.SYD C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Istanbul C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\iedvtool.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AUTHZAX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\vlm.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00965_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0296288.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR2B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR12F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh89 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text_3.5.300.v20130515-1451.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInViews\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_VelvetRose.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\el.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Photo Viewer\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\rss.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0148757.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALENDAR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\Office64WW.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Apothecary.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Civic.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBPAGE.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Kerguelen C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\rmid.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\browser\features\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02758U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR23F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIcons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\youtube.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384885.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL022.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCRD98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\prism-d3d.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\WISC30.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-annotations-common.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\EnableWait.mpa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mousedown.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\RSSFeeds.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD20013_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcs.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\UTILITY.ACCDA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\1 Right.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107158.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Havana C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-desk.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PROOF\3082\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\JSProfilerCore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Magadan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+10 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00555_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR49F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR49F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\GMT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\MSCDM.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00135_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105332.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Bibliography\BIBFORM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ORIG98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text_3.9.1.v20140827-1810.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Atikokan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\rtscom.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01603_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152884.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21448_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Brisbane C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\CoolType.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsImageTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Horizon.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21413_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Stationery\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher_1.3.0.v20140911-0143.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Monaco C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Amman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18232_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceSimplifiedShuangPin.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\ImagingEngine.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-attach.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\28.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\mip.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222019.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14529_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\MSB1FRAR.ITS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21481_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_blu.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145707.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GIFT.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\org.eclipse.rcp_root_4.4.0.v20141007-2301 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\unpack200.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libcache_block_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\README.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00544_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01157_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Khartoum C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\gradient.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14867_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\UndoRemove.ex_ C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01751_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsBlankPage.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sl.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Eirunepe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\video_output\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02074U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341328.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_GreenTea.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Oslo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Choibalsan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.annotation_1.2.0.v201401042248.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedShuangPin.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\CURRENCY.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\service.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\deploy.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Paper.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Brunei C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Pacific\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\sunec.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\meta_engine\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\simplexml.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\en-US\msader15.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01213K.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00194_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-outline.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00218_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Perth C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\attach.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\npt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02125_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00608_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBCALSO.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\setup_wm.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_pressed.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic 2.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\StopIconMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\JFONT.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCOUPON.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LOGO98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\NOTEBOOK.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\java-rmi.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\eula.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Minsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Shorthand.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\wmlaunch.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32Info.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\ReadMe.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_cs.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\STSUPLD.INTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Apex.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0251871.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNote-PipelineConfig.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-templates.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libudp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\setting_back.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\back.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\currency.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORTS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javap.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\STUBBY1.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21519_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR44F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01748_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Country.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Fancy.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-US.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7FR.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00221_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmpconfig.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105384.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bg\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_off.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\java.policy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099194.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Hardcover.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15301_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_LightSpirit.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mru_on_win7.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107516.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR38F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SUBMIT.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\sqloledb.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\en-US\jnwdui.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Perspective.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME19.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.MY.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLY98SP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\installer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\WATER.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19827_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\Presentation Designs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\24.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.en\Proof.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00524_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00938_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02048_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonDown_Off.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-lookup.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\soundcloud.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EntityPicker.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Earthy.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Defender\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\2 Top.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\co.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_iw.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00161_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\resources.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\jconsole.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN02559_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR51F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_bullets.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00114_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02503U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Nome C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\platform.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\status.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color32.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\4.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18234_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLADD.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rio_Branco C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Module.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\audio_output\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.LIC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04269_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183174.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01237_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00246_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185774.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239965.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\tab_on.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmpshare.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199469.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSAutogen.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\RTFHTML.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\time-span-16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\F12.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\IEShims.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-common.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Hebron C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSSOAPR3.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ru.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\java_crw_demo.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_it.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Auckland C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\10.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00603_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\6.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jawt.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Rankin_Inlet C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107264.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387604.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Horizon.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21321_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_hu.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\oeimport.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\vlc16x16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152556.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\bin\dtplugin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301432.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00734_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_WMC_LogoText.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\MCESidebarCtrl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Sofia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107154.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Majuro C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Faculty.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107544.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\SAVE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\j2pcsc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18182_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Adobe.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmprph.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Background_QuickLaunch.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02749G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplateRTL.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\Install\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01006_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18212_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15133_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\ORG97R.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\init.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+6 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_mmx_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00100_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN102.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\ado\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN103.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\OFFREL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\template.msi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\MSB1FREN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\VSTARemotingServer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD07761_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00444_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00557_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01421_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdate.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00373_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\ZY______.PFB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\SKY.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libps_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\jsdbgui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_da.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_decreaseindent.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7wre_es.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\cpu.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\Parity.fx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBlankPage.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02263_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-api.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-tools.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\APIFile_8.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataListIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\mr.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Almaty C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Monaco C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01152_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Bangkok C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08773_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00265_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00808_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multiview.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\8.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187837.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Payment Type.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-loaders.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145272.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts2.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_pressed.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msxactps.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239951.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\bod_r.TTF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Reykjavik C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216588.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR4F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsDoNotTrust.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0300520.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18228_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA000C.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee90.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\1.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kk.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_win.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-actions.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Australia\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.hsp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0294991.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\policytool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows NT\TableTextService\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\wabfind.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\OPHPROXY.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099151.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14752_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR18F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_mac.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MML2OMML.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\servertool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304875.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10300_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\msdbg2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\stream_filter\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Soft Blue.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\ActionsPane3.xsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OUTGOING.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\25.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\networkinspection.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-api.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01631_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackground.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_zh_HK.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090390.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382960.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Casual.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libxml_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02055_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Solstice.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME29.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EXLIRM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALSO11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\perf_nt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01239_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00671_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\vi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\INDUST.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198447.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\vimeo.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02287_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AboutBox.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\EmptyDatabase.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_de.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196354.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7tkjp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-heapdump.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Tunis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4.ssl_1.0.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-modules_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN110.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Photo Viewer\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mn.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libgestures_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00261_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18211_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099164.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Discussion.gta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\LASER.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONMAIN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02094_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Wordcnv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AppConfig.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14828_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\attention.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\services_discovery\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_av1_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\mpvis.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287643.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03012U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sq.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\36.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\JOURNAL.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONWordAddin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Petersburg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\vcruntime140.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Solstice.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\40.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\libxslt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\javafx-font.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Qyzylorda C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\activity16v.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\4.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00254_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Thatch.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSACC.OLB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0156537.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REMOTE.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_mid.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\d3dcompiler_47.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00058_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7fr.kic C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00157_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\eula.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Hong_Kong C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadcfr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\LICENSE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse_2.1.200.v20140512-1650.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\42.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\tr.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextService.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\2d.x3d C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\wab32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-modules.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\custom.lua C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Graph.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185828.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\te.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SUBMIT.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212299.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSOHTMED.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00297_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00414_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03731_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01747_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02073_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_decreaseindent.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_floating.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186364.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLPERF.H C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\excel.exe.manifest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01044_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\sandbox.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL048.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBAR11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\bg_sidebar.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig.companion.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Hovd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\SkipOptimize.aifc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PDDom.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\EDGE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309902.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382927.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\OmdBase.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Median.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\add_reviewer.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACER3X.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CGMIMP32.HLP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONPPTAddin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\UserControl.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nb\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\PingUndo.reg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01299_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15172_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Hierarchy.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MsMpRes.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Zaporozhye C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\SecStoreFile.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01636_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01182_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309664.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21308_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\VelvetRose.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XLMACRO.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\perfcore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Khandyga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Moscow C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\ImagingEngine.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\navBack.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\BOLDSTRI.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_on.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3ES.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00117_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02218_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\PINELUMB.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\RICHED20.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00136_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14595_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_orange.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+1 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD07831_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00241_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Funafuti C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\booklist.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\local_policy.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\luac.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21329_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libEGL.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\VBE6EXT.OLB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14580_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Atikokan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Caracas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\org-openide-filesystems_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\glass.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00407_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107358.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0313974.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01848_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21327_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.UK.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0281904.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Omsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\jfluid-server.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00068_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PSTPRX32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\Wks9Pxy.cnv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00784_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\SOCIALCONNECTORRES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticnotification.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\requests\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105282.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115841.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\VIEW.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Synchronization Services\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\jquery.jstree.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239191.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_drop_shadow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-applemenu.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\JOURNAL.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309480.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Essential.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7MDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0293800.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows NT\TableTextService\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Status.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\en-US\MsMpRes.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\TabTip32.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_10.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01575_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Goose_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.config C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285808.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Enderbury C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\slideShow.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\email_all.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\PAB.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Earthy.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\sqmapi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\rt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\ZoneInfoMappings C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15155_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\FORMS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\MMHMM.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL090.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)notConnectedStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jawt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Boise C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02223U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\COMPUTER.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153307.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01852_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\FONTSCHM.INI C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\11.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\SONORA.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Monterrey C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\IACOM2.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01152_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-9 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bogota C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Amsterdam C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309585.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lt.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nassau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.CMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\EXPEDITN.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00414_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR34F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR50B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01746_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.core_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Kiritimati C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\sa-jdi.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEXBE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\utilityfunctions.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunec.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrome.7z C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\features\[email protected] C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msadox28.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239997.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Media Renderer\DMR_48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01560_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01590_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\MINUS.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\El_Salvador C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fa\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\DW\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00164_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00935_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15272_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHKEY.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\TEXTAREA.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBWZINT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Uzhgorod C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\eclipse_update_120.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152430.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0280468.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OART.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieResume.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunmscapi.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00011_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Foundry.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\calendar.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt_0.12.1.v20140903-1023.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\meta-index C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\SIGNUP\install.ins C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00956_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Chita C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN092.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03451_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsubstx3g_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105526.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hi.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Martinique C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Bermuda C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows NT\TableTextService\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00439_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198022.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPQUOT.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14755_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME39.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\updater.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\ucrtbase.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\ENUtxt.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04196_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09662_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME07.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\misc.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\picturePuzzle.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04117_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145810.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105320.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\CAN.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\sbdrop.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Stanley C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.APL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01149_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Hardcover.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\diagnostic-command-16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-search.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-modules-profiler_visualvm.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\PPKLite.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hr.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsColorChart.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216570.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01066_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Lima C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Mauritius C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Chatham C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-dock.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOffNotificationInAcrobat.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00685_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01866_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RSSITEM.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14656_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341645.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+11 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.filesystem_1.4.100.v20140514-1614.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator_3.3.300.v20140518-1928.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Dawson C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14531_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\DefaultBlackAndWhite.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mr.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\3difr.x3d C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00391_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\EXITEML.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-search.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\omni.ja C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\nss3.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\RTC.der C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sa.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\URBAN_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RESENDL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00814_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt_0.12.100.v20140530-1436.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Journal.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198102.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DOC.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUNGLE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookbig.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox_1.0.500.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\jfr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Reykjavik C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libwinhibit_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099176.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105280.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ms.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0335112.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\wabimp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00389_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\AUMProduct.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03014_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LETTHEAD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AIR98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kab.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Nicosia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOHEV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\7.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240189.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MP00132_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03205I.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21319_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunec.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\ssvagent.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GostName.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\6.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099203.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mouseout.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_id.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341499.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\PST8PDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\ResetMerge.m4a C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEOLEDB.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00633_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Karachi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\classlist C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-lib-uihandler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00130_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR49B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART5.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBPQT.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SAMPLES\SOLVSAMP.XLS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOMessageProvider.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.stdformat.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-4.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106816.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01361_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\CALENDAR.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Tulip.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\an.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Bogota C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18225_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\spacer_highlights.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\v8_context_snapshot.bin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\29.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\VBE7.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01366_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02759J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\BUZZ.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\SIGNUP\install.ins C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\sRGB.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00397_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0230553.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\CollectSignatures_Init.xsn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGNAVBAR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multitabs.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-options.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00902_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099177.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281630.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02750U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\klist.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Adobe.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18237_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_cs.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\digest.s C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_zh-CN.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00171_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\15.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01585_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EADOCUMENTAPPROVAL_REVIEW.XSN C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Simple.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\HORN.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-awt.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_joined.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\REMINDER.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util_1.7.0.v201011041433.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXEV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00176_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\VISSHE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\DefaultID.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\GWE.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00445_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00704_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18238_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_OffMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Form.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sampler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libflaschen_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\MSPVWCTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\tpcps.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pa\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\VOLTAGE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME23.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ContactSelector.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Rainy_River C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\sqlite.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\MSOSV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CG1606.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME33.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCARD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialResume.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\CONCRETE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00369_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0183290.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15184_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDRESN.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Costa_Rica C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\MediaReceiverRegistrar.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\EDGE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21302_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PICSTYLES.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\F12Tools.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD06102_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00998_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05930_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONTACT.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsViewAttachmentIcons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL027.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javadoc.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nipigon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188669.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02810J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_TexturedBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNote.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\core_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_es.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107344.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01123_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLPH.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\dragHandle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Karachi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Earthy.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Norfolk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.runtime_3.10.0.v20140318-2214.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\localedata.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Syowa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\alertIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ar.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\jsdebuggeride.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Media Player\Network Sharing\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\1.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\19.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\penkor.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTFORM.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PROGRAM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libavi_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107452.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200183.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297757.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGATNGET.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\icudt36.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0229385.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN097.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Stock Quotes.iqy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Juneau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Maputo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01545_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02120_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15056_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293844.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.batik.util.gui_1.7.0.v200903091627.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\.lastModified C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Grayscale.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vilnius C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdatt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR22F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18191_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\dcpr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Rothera C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\tnameserv.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Antigua C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CRT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\OARPMANR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00255_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187921.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115876.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL111.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fa.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SPANISH.LNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Pushpin.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Photo Viewer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-output2.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Amsterdam C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\AST4ADT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME40.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_GreenTea.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02412K.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00913_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Horizon.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKACCL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN090.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore_2.10.1.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\SNET.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143746.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\ODBC.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\WARN.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_alignleft.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLRPC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Porto_Velho C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\en-US\MpEvMsg.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\LINEAR_RGB.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN03500_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Macquarie C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\sd\icecast.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACERCLR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237336.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18244_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaSansRegular.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-12 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.clusters C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mspub.exe.manifest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\1100.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MOR6INT.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-visual.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143758.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Newsprint.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libpva_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\info.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00419_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SAFRI_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18253_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\PhotoBase.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\VDK10.SYX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0252669.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00683_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\27.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00985_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00448_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02748U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02791_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Premium.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\libxml2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\36.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Belgrade C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\mozavutil.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\AFTRNOON.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01658_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00685_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18208_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Adobe.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Shanghai C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsPrintTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099172.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Bahia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\br.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\ECLIPSE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00078_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00034_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01839_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ho_Chi_Minh C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-today.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04235_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0390072.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PICCAP98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\alt-rt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+7 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-coredump.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL104.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\SynchronizationEula.rtf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\WindowsPowerShell\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_TexturedBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PRRT.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR1B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\WHOOSH.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL075.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Tasks.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Sales Pipeline.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\CST6CDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pohnpei C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Guyana C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormToolImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_bezel.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tr.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107446.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0182689.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPLTMPL.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SIGNS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libscte27_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cayenne C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\sd\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099174.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00916_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santiago C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00076_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME09.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\PMAILEXT.ECF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\macroprogress.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN105.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\BloodPressureTracker.xltx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_socket.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_received.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01660_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14795_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB9.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdaosp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSProxy32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Kaliningrad C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\ended_review_or_form.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00760L.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\AUTOSHAP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\MemoryAnalyzer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00052_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jps.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\blafdoc.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqloledb.rll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01180_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\ant-javafx.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-uihandler.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadcf.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18224_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME12.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Fakaofo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2native.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\el.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02736G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14516_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\ACT3R.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\INTLDATE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.CGM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa37.hyp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santa_Isabel C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\org-openide-filesystems.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\San_Luis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCOLKI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Marquesas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-progress.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+2 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Majuro C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX9.x3d C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01174_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00211_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18222_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Other-48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tl.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\InkObj.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382970.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-4 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01301_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Currie C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\rt3d.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\eng.hyp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ED00172_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099183.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\RECALL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Madrid C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\CalendarToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\README.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\en-US\msdaorar.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152698.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01701_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_underline.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.NO.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GIFT.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kaliningrad C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18220_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\bdcmetadataresource.xsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CHECKBOX.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jabswitch.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107182.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\grvschema.xsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libasf_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\BREEZE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLJRNLR.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Azores C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Installed_resources14.xss C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Skins\Revert.wmz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02829J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0229389.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME51.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR1B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7FR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Northwind.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\THROAT.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107302.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Discussion.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\mpvis.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kiev C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ContactPickerIntl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\COUPON.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\wab.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME54.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR51B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Components\VeriSign_Class_3_Code_Signing_2001-4_CA.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Novokuznetsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\jnwmon.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240157.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0211949.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pontianak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\DW\DBGHELP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01178_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_preferencestyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Ojinaga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageScript.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\sonicsptransform.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Asuncion C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\EST5EDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\TipBand.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME05.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-uisupport.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145879.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BS2BARB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Ceuta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105328.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME10.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR47B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\BOMB.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB2A.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01562U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME52.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+9 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Ushuaia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kwajalein C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN02724_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Colombo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\JP2KLib.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099179.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\row_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-execution.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\rmiregistry.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.contenttype_3.4.200.v20140207-1251.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00095_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLV.PPT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\az\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\OLKFSTUB.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadce.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15273_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\clock.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02746G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099195.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\adcvbs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher_1.3.0.v20140415-2008.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7wre_fr.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.MX.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CLICK.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pl.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_zh_TW.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\WindowsPowerShell\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105232.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02082_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\controllers.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadds.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\as_IN\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\eula.rtf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Macquarie C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Pago_Pago C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00252_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\vi.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7FR.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice-install.log C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\PhotoBase.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309920.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00910_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\List.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-core-kit.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\44.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1CORE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN107.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Andorra C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfontj2d.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\uninstall\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\WATERMAR.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-output2.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-14 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232395.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382957.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR37F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\ATPVBAEN.XLAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AWARDHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\F12Tools.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Mexico_City C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-disable.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Roses.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBCN6.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateComRegisterShell64.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\LOCALDV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105410.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188667.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152602.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1033\MSGR3EN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Technic.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR44B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.shell_0.10.0.v201212101605.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-explorer.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-nodes.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\plugins.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21300_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14883_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\StatusOnline.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.ComponentModel.DataAnnotations.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00524_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_Undocked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+4 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Jayapura C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174635.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01236_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSO.ACL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR39F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\ACCOLK.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\invalid32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\db\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-10 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Tags.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\ResourceInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9YDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Thatch.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14533_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hr.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00525_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SUMER_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00527_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21534_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Cocos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Verve.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\java-rmi.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_bottom.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\InfoPathWelcomeImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENV11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.hyp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01242_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216724.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\47.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\NOTE.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msaddsr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\MSOSVINT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_es-419.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01166_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\is.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\submission_history.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00915_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\zipfs.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ja_JP.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Grand_Turk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Creston C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\te\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107364.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341557.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormToolImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\en-US\TableTextService.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\w2k_lsa_auth.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Guatemala C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR43B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OLKIRMV.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceoledb35.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\23.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadce.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ENGDIC.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SNIPE.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216153.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\sound.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01473_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_mid_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SPRNG_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadds.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\charsets.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBLINK.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\picturePuzzle.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.common_2.10.1.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00142_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02071_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10297_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WPULQT98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoDev.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Origin.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\utilityfunctions.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macTSFrame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00487_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\speaker-32.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\sound.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app_1.0.300.v20140228-1829.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\helpmap.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RESP98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jarsigner.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-impl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\en_GB\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_Off.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187817.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SHARING.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_underline.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Wordcnvpxy.cnv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\TextFile.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02201_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL092.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALENDAR.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\XmlFile.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-options.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\RADIO.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN065.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl-hot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\plugin.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\derby_common.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Campo_Grande C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_choosefont.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\ACT3.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-desk.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FEZIP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\adcjavas.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libdca_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\7.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Outlook.en-us\OutlookMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\EVRGREEN.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101864.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGREPFRM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLN.DOC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsBrowserUpgrade.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR6F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_TexturedBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.metadataprovider.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Qatar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_en.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02746U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ky.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\add_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSRTEDIT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Araguaina C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107314.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198372.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR25F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Port_Moresby C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\41.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02280_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYVERTBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-10 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvmstat.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107480.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287020.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\St_Johns C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-settings.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_de.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Eucla C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\as_IN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188587.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01041_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\QuizShow.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanMergeFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME04.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\jnwdui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FBIBLIO.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME08.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\da.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\zip.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\STUDIO.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Flow.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15135_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME22.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLCTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can129.hsp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MLCFG32.CPL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGNHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198234.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297749.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDCNCLS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\WMPMediaSharing.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-dock.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Phoenix C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pe.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-spi-quicksearch.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\logger\libconsole_logger_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107730.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03331_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.bidi_0.10.0.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_disable.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107494.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE06450_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_hyperlink.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedbck2.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_win7.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00453_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18236_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\form_edit.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosecolor.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Darwin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Prague C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Taipei C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\ProPlusWW.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\QUAD.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239973.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0282126.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART3.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PEOPLEDATAHANDLER.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02373_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libwall_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18249_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Traditional.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL082.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.WIH C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01158_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00820_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0251925.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBAR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18217_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\kn\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUISet.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115842.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDCNCL.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared16x16Images.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL106.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\oracle.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387578.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-14 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpClient.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00669_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\profilerinterface.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\South_Georgia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\lgpllibs.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01140_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185778.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199473.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\FOLDER.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\ERROR.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Issues.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143750.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Lima C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jsound.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfr.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dili C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Client.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04385_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301418.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdatl3.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libty_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\COMPASS.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099199.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0295069.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupicons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\form_edit.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\MDIParent.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386270.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Windhoek C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceArray.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_te.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01146_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CONTACT.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guam C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\COMBOBOX.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_bkg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-7 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\DELETE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\INLAUNCH.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Simferopol C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64_3.103.1.v20140903-1947.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00806_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Solstice.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\MSBuild\Microsoft\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker_1.1.200.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Internet Explorer\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\DiagnosticsTap.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Internet Explorer\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMAIN.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\HEADINGBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng2.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287019.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.IT.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ru.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ta.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178632.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\STSCOPY.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libsmb_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00440_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\picturePuzzle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Bucharest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Dublin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Services\verisign.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00262_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21328_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Premium.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jabswitch.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-progress-ui.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00648_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143753.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Module.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0157763.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0305493.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Casual.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Lisbon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsVersion1Warning.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Country.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-queries.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Puerto_Rico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00141_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Opulent.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\BREEZE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\AdjacencyLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\powerpnt.exe.manifest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tahiti C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14871_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RCLRPT.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Shanghai C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaora.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0089992.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WHIRL2.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CONTACTINFOBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\README.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-options-keymap.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Nauru C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_pt-PT.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18254_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OLKFSTUB.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103058.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382947.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00289_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18235_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Pitchbook.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR5F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Kwajalein C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME16.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBOX.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CST6CDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR31F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Montevideo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MAPISHELL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\GroupImport.vbs C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1CACH.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01659_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ru.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7Handle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libhds_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0088542.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\management.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Components\SignedComponents.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\modules\httprequests.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238333.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\conticon.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS2SWOOS.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\CircleIcons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_basestyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ro\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00388_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baghdad C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\SAMPLES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00157_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Buenos_Aires C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099198.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02384_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14981_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21331_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PROGRAM.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-vertical.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7en.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\VVIEWRES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-uisupport.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaps.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00419_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSYUBIN7.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ACCSBAR.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Troll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\libsubsdelay_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIconsMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGAD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\glass_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\file_obj.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvmstat.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Dawson_Creek C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\lua\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSDecWrp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309705.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-common.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Winamac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\text_renderer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\1.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18190_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7ES.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Internet Explorer\SIGNUP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jp2iexp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341561.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02265_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\da.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\uninstall\uninstall.log C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\index.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libprefetch_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02269_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\OFFICE10.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\VVIEWDWG.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guadalcanal C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Tokyo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153047.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTITL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyclient.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Ndjamena C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Chagos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\86.0.4240.111_chrome_installer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CARBN_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00915_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR28F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00296_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageScript.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RESUME.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0136865.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWORIENT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\39.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh89 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\45.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ca.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105276.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287018.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR21F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libd3d11va_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01858_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15168_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21313_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\INFOMS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Bermuda C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jaas_nt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Caracas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Xlate_Complete.xsn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\3082\MSO.ACL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Seoul C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.property_1.4.200.v20140214-0004.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine_2.3.0.v20140506-1720.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ar\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Composite.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21301_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Brisbane C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNoteNames.gpd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hi.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME15.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\classfile_constants.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libtta_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.SemiTrust.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7EN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Phone.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jfr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile_view.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00194_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\LAUNCH.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\PUSH.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santa_Isabel C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Rio_Branco C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\10.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\playlist\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpOAV.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\MSB1FREN.ITS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01176_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Groove.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONFILTER.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javah.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\RSSFeeds.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RSPMECH.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONTACTS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\10.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSOSEC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\meta-index C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\rt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\blocklist.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_bg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107280.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\resources.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives_1.1.100.v20140523-0116.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-print.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-attach.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Riga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\eqnedt32.exe.manifest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\CR_02A57.tmp\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\GRDEN_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04267_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\kinit.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.jobs_3.6.0.v20140424-0053.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301050.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGTOC.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Beirut C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ml.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195248.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Barbados C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libopus_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\bl.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OUTEX.ECF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageStyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Beulah C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\NETWORK.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-BR.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Audio-48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151055.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XLCALL32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01638_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0301052.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15173_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsHomePageStyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\31.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04134_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\nio.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-sampler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaurl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18255_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\UTC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXP_PDF.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\REFINED.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\launcher.win32.win32.x86_64.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00057_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01637_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Composite.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152690.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21295_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\applet\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\WTSP61MS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00443_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLV.DOC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-multiview.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\GMT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\CST6 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Seyes.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00943_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Media Player\Icons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\D3DCompiler_47.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-options.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02161_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\INDST_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Bougainville C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00809_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR29B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZTOOL.ACCDE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178523.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\id.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\dt_shmem.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01239K.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Aspect.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.sfx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_lg.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Urban.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\DumontDUrville C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ACERECR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107734.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0149407.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\DVDMaker.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Genko_2.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00882_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\Custom.propdesc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application-views.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215210.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ENGIDX.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.SharePoint.BusinessData.Administration.Client.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-middle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\ado\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-tabcontrol.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\JOURNAL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\MMSL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Casual.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\SetupMetrics\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\trash.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099202.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21311_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGREPFRM.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\BodyPaneBackground.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msmgdsrv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00170_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPISHELLR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1036\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART8.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01772_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Oral C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Equity.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR35F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePageBlank.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\12.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.oracle.jmc.executable.win32.win32.x86_64_5.5.0 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Rangoon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRINTL32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME13.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01253_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\AUMProduct.aup C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\MSMAPI\1033\MSMAPI32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02088_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107712.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OOFTMPL.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0148798.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OCLTINT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\TECHTOOL.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-execution.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\US_export_policy.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\26.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ko.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoCanary.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACECORE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierWindowMaskRTL.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPIR.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\javafx.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Regina C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\weather.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01236U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00199_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00482_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN001.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfps_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSSOAP30.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ur.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msmdlocal.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0089945.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01743_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Maceio C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Chihuahua C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Paper.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14756_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition.fdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\serialver.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.FLT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107290.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\EditRegister.xltm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\EST5EDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Baku C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107308.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FORM.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL107.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku-ckb.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLWVW.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME34.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Stanley C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\DiagnosticsHub.DataWarehouse.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Whitehorse C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EVRGREEN\EVRGREEN.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090777.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215076.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ka.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Composite.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0157995.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00732_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\Microsoft.Ink.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101980.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SlateBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\networkinspection.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR12F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\GrooveFormsMetaData.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianReport.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\cs.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR36F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\INCOMING.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\WindowsPowerShell\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ne\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\EXP_XPS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\FUNCRES.XLAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OLMAPI32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Los_Angeles C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.lock C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_it.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FINCL_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02431_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Scoresbysund C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcfr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SHOW_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00192_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosefont.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.FR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spc.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\D3DCompiler_47.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+1 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\service.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdate.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00005_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00177_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sk.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02067_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCESS12.ACC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WHITEBOX.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.event_1.3.100.v20140115-1647.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR7F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\New_York C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\title.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\mshwLatin.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MUOPTIN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01191_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Doc.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR8F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-windows.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14793_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Srednekolymsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR48B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEDAO.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libogg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDBAR98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.services_1.2.1.v20140808-1251.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\Download\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143743.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PPTIRMV.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk_1.0.300.v20140407-1803.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\sunmscapi.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00090_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02312_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN082.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\setting_back.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00015_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0228959.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ogalegit.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wallis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\Accessories\WordpadFilter.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Hardcover.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.MMW C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15035_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Wake C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\mlib_image.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CUPINST.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105288.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\CASCADE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099149.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7db.kic C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\server\Xusage.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Knox C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153091.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01356_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02097_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\IPDSINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\TURABIAN.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielMergeLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DVA.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0324704.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateBroker.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00045_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01080_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WING2.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR24F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tahiti C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\slideshow_glass_frame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\40.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00160_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02262_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\CalendarToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Media Player\Network Sharing\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee90.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\orbd.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\weather.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00260_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREETING.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\Notebook03.onepkg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cy.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR45B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLINACC.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tet\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02077_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21495_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\RTF_BOLD.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSans.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01173_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00361_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107528.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0205582.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft.NET\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\co\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\28.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105912.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292272.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01247U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-search_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mouseout.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01039_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-tabcontrol.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libcache_read_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239057.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Elemental.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR28F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\OneNote\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsoundds.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\HandPrints.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME21.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BORDERBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\activity16v.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)grayStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Concourse.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WWINTL.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_OliveGreen.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\MAIL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Name.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Monticello C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_hi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_right_disable.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWRECE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tegucigalpa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Back-48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_choosecolor.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TaskbarIconImagesMask256Colors.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNote.gpd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmpnssci.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Grand_Turk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\GostTitle.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\QuestionIcon.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\fieldswitch.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Month_Calendar.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\11.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\License.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7es.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\OrielFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14583_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MP00021_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN01308_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hovd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\33.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143745.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB10.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUDGESCH.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AXE8SharedExpat.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\SKY.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02166_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Module.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18198_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\th.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmpconfig.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107192.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_200_percent.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Swift_Current C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\RIPPLE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\SWBELL.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanPhotoAlbum.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fy.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0251007.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0279644.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADVTEL.DIC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Antigua C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00116_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00200_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15019_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7FR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\net.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Syowa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\jawt_md.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\meta-index C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Cape_Verde C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Madeira C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115868.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\ARROW.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fil.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yakutat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Oslo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\PhotoViewer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0195384.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\MessageHistoryIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\SUBMIT.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Filters\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Couture.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCDDS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierBackgroundRTL.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kolkata C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\server\classes.jsa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Folder-48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\PSS10R.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00636_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Opulent.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7zCon.sfx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03241_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libcc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\MyriadCAD.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cgg\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\oledb32r.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\WindowsPowerShell\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ext.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\install.log C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_a52_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01294_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_AutoMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\MST7 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03339_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0251301.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18245_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Sts.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\VPREVIEW.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ba.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup-impl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\CASCADE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099158.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188513.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285410.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00236_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\PLUS.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400001.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME06.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\excelcnv.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALNDR98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XPAGE3C.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmpnssci.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00296_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195320.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382930.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLSTS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOUTL.OLB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Madeira C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Gibraltar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\images\cursors\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\CONCRETE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\Microsoft.Office.Infopath.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lv.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Magadan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Noumea C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_flyout.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pl.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOCFUIUTILITIESDLL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\demux\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.CNT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\Hx.HxT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00320_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0294989.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382836.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application-views.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\video_splitter\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightRegular.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\oledb32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fa.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEIRM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04355_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Contacts.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightItalic.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01586_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0240175.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.PH.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\et.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Cordoba C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00135_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00195_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090779.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Anchorage C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ashgabat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\jsprofilerui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\SUMIPNTG.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01293_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115856.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\PASSWORD.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_pwa_launcher.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\icudtl.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382948.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Track Issues.fdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendtoOneNoteFilter.gpd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Melbourne C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\wa\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400002.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02886_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME45.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STRBRST.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00126_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-core-windows_visualvm.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_left.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\slideshow_glass_frame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Salta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\MET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0187423.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OOFS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsColorChart.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yekaterinburg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\zipfs.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\MSOINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\14.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core_2.3.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\WATERMAR.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Metro.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBSBR.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Ushuaia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\activity16v.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106572.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OFFLINE.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\af\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\redStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01179_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONTAB32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199609.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384900.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00542_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN109.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR32B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00728_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14800_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMARQ.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWSHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGN.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\DATES.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7jp.kic C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NEWS.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Johannesburg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Center C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.continuation_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\it\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\Attachments.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.HK.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\16-on-black.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Shades of Blue.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02443_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02285_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nn.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN02122_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238983.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01462_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\COUGH.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-startup.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\CLIPART\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00531L.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10301_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR46F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\LICENSE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\dsn.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Flow.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSOSEC.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\README.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ar.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libexport_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\MSCONV97.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00174_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00208_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00222_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CNFNOT.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-io-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WCOMP98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\local_policy.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-text.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-core-kit.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageSlice.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.exe.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR49B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00173_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\abcpy.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01173_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105502.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Couture.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledb32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-j2se-1.0.2.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387882.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00638_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRINTL32.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGTEAR.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\VSTO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\WMPMediaSharing.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OMSMAIN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tarawa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Rio_Gallegos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\glass.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui_3.106.0.v20140812-1751.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151047.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePageBlank.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\LAUNCH.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\he.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145212.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199279.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dushanbe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RICEPAPR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\xmlrwbin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00441_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02404_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Mawson C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\javaws.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\spacer_highlights.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281638.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02742G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB02229_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jvm.hprof.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.Server.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\24.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15059_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpEvMsg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\review_shared.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01905_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\ResourceInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\javafx-iio.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+5 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0197979.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387337.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin_2.0.100.v20131209-2144.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Madrid C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-io.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\x86\vsta_ep32.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENVELOPE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\CST6 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.http_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOffNotificationInTray.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft.Office.InfoPath.targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jsadebugd.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\uz\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_chromaprint_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\offset.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\IMCONTACT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jvmticmlr.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Asuncion C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Rarotonga C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\new-trigger-wiz.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Pohnpei C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0302827.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18218_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\UnreadIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\WIND.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART14.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBREF.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0292020.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IPOLK.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Marketing Projects.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00077_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00911_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Person.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieNewsletter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00018_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\Accessible.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00458_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBAD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\LICENSE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-nodes.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Orange Circles.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuching C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\PST8PDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\deploy.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\PROFILE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Flow.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222017.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_VelvetRose.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\STOCKS.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_kn.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00234_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IEContentService.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GKExcel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\GIGGLE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105368.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241043.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0240719.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OneNoteSyncPCIntl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\POLICIES.FDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL065.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\WMPDMCCore.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00390_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-13 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\blacklist C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00103_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02435_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Formal.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\OnLineBusy.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03470_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SCHOL_02.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\31.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Vladivostok C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ff\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\BREEZE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00232_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\decora-sse.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0196164.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\main.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR19F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01628_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107258.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107500.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Setup.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105396.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\RADAR.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\connectionmanager_dmr.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_bottom.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\system.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00204_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Trek.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02262_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\StatusAway.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Interface.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\FDATE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CA.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN075.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\currency.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Updater6\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21480_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Medium.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSPST32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluHandle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\server\jvm.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\WET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00158_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0144773.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01265U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYERHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\javafx.policy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Half.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107488.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0304933.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\java.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Louisville C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Samarkand C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\PDFPrevHndlr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14790_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21548_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOCFU.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\RADIAL.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18247_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\header.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\en-US\ImagingDevices.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01572_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CAMERA.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro_3.4.200.v20130326-1254.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledb32r.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\MpRTP.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\template.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\7-Zip\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+8 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Verve.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN086.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7ES.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lord_Howe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Grid.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-api-caching.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18206_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QUIKPUBS.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookicon.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\New_York C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00248_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15136_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\SUMIPNTG.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\libaudiobargraph_v_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can32.clx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21299_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSPPT.OLB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152876.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01627_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR4B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIcons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LTHD11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Casual.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.ES.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-3.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\ktab.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunmscapi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Singapore C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\PDIALOG.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaenum.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoBeta.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Recife C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00723_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\decora-sse.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services_3.4.0.v20140312-2051.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-loaders.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CHIMES.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator_1.1.0.v20131217-1203.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Media Renderer\RenderingControl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099204.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02794_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.UDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IPIRMV.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CERT.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.artifact.repository.prefs C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.util_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\content-types.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Vincennes C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Atlantic\Faroe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gd\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\spu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR21F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\STSLISTI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SIGNL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FORM.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ca\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\WatchExit.odt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\SmartTagInstall.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGAD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\jvm.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-lib-uihandler.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\index.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color32.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\10.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHighMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-options-api.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\mozglue.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0321179.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TAIL.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImages.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsImageTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Accra C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BZCARDHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OFFXML.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fa\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts2.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\FeedSync.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\F12Resources.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\OUTLVBA.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\weather.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\dnsns.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.descriptorProvider.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet.jsp_2.2.0.v201112011158.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0296279.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01044_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\et.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Fortaleza C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME26.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\yo.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\forms_distributed.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19582_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\uarrow.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPAPERS.INI C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\PABR.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Contacts.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00454_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSCOL11.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\Desktop\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\images\back_lrg.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_sun.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActionExceptionHandlers.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Pangnirtung C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Apia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\ECHO.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152436.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR40F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Angles.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\RPLBRF35.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\1px.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Hobart C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher_1.1.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\MET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\THEMES.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\IEShims.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02845G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_bullets.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pyongyang C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\STINTL.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00298_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Paper.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR3F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\PipeTran.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)alertIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-horizontal.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00397_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADVCMP.DIC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSTORYVERT.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00008_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423861240389.profile.gz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105520.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\UserControl.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Ashgabat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02749U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.WPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01785_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME17.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBRPH2.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382961.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\WATER.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01461_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSN.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Wkconv.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00403_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00014_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_client.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\HST C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Composite.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\NVBELL.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-settings.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02022_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Toronto C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\bin\plugin2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14801_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Modern.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Verisign\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ja.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14532_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_center.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGMASTHD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\FiveRules.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_bottom_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\AST4 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\msadc\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386120.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02368_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hong_Kong C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_bn.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Technic.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234266.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Accra C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Media Renderer\DMR_120.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mouseover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\GlobeButtonImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\PROCDB.XLAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00668_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\DataType\Start End Dates.accft C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01063_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.Infopath.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOCF.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Algiers C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL054.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-6 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.registry_1.1.300.v20130402-1529.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107152.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186360.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Azores C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\.lastModified C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Damascus C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\Words.pdf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\TIME.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105240.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0211981.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\awt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMSL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_it.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jdwpTransport.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_sv.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Mail\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00516L.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CharSetTable.chr C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutofSyncIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Uninstall Information\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_On.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\pipres.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OSETUPUI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Newsprint.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_settings.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0196374.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_FormsHomePage.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\WORDIRMV.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\dkjson.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-outline.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jaas_nt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Mendoza C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\ISO690Nmerical.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\SplashScreen.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\adodb.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hebron C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Minsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00129_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0400005.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14866_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME53.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\LOOKUP.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-spi-actions.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSIDEBR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Miquelon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00049_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14579_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21315_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\BCSRuntimeRes.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AUDIOSEARCHSAPIFE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHigh.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03513_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\DiagnosticsTap.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232795.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\LICLUA.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.ssl_1.1.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00105_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285792.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\InactiveTabImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\setup.swf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0228823.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN022.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Port_of_Spain C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145168.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Verve.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7cm_en.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\VisioCustom.propdesc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Media Player\Skins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Niue C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\artifacts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluTSFrame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099205.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_flyout.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\Ole DB\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101866.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME49.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDCNCLL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\PHONE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\brx\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\meta\art\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw48.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_ta.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsBlankPage.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN081.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\CodeFile.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cambridge_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.JP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\deployJava1.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02398U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00837_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02862_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Lord_Howe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libshm_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBHW6.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21307_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSRuntime.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\03_lastfm.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-disable.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01015_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Christmas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sv.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsfsstorage_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Esl\AiodLite.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\msolap100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ENGLISH.LNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\meta\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESPL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielMergeFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\New_Salem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157191.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Opulent.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105490.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SegoeChess.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.expressions_3.4.600.v20140128-0851.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js\slideShow.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\adovbs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01171_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0285926.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\send-email-16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSEvents.man C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10256_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0278702.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301480.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_bkg_orange.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Office Classic.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Classic.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAILMOD.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPWEC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103402.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\EXPLODE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.conf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00006_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Executive.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSO0127.ACL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\RECYCLE.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\PROFILE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00942_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\dtplugin\deployJava1.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152716.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195772.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0291794.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\SessionMember.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Tunis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00452_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\flyout.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\La_Paz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Jerusalem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_Premium.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\ARCTIC.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\doclib.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dushanbe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Simferopol C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\USP10.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUECALM\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02126_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Winamac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\wab.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\macroprogress.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15302_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdasc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.Runtime.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Adak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_sun.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00169_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18248_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL001.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator_2.0.0.v20131217-1203.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt32.clx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\LEVEL.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107254.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241077.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XLCPRTID.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153516.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099192.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\date-span-16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\MSB1ESEN.ITS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105846.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00489_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PAPERS.INI C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\RMNSQUE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106958.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00183_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\CALENDAR.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBPAGE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\alt-rt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-applemenu.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Media Player\Skins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216516.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBBTN.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Istanbul C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297551.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Graph.exe.manifest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DOTS.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Malta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\13.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\msjet.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ENVELOPR.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR11F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IEAWSDC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\cacerts C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\t2k.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\sd\jamendo.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01357_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR48F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msdaprsr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02264_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Austin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR27F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dial_lrg_sml.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\WindowsAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\extensibility.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00006_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\eng32.clx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198712.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Custom.propdesc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mauritius C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-execution.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18207_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\modules\common.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CUP.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fi.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01568_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Invite or Link.one C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03668_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santo_Domingo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\xul.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.SE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Verve.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGLOGO.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Response.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\rings-dock.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14691_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Paris C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_ko.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OneNote.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Grid.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199805.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\subscription.xsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\17.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\appletrailers.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\airappinstaller.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\GRID_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00917_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\BOLDSTRI.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\NEWS.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01157_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\eventlog_provider.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\help.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01084_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01491_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143752.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DissolveNoise.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01138_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.HK.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\access_output\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR31F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\builtincontrolsschema.xsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ho_Chi_Minh C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviewers.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00601_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341742.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0300912.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18200_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14581_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL096.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FORMCTL.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\5.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)notConnectedStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00485_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\UrbanMergeLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baku C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mai\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\0.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02417_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\107.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\WMPDMCCore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services_1.1.0.v20140328-1925.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02141_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107722.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18257_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplateRTL.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORM.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libvdr_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\pmd.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Roses.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107490.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-explorer.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLAPPTR.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Kiritimati C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Costa_Rica C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY01563_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Civic.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15132_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansRegular.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\REPTWIZ.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-compat_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\MSTAG.TLB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\MSB1ENES.ITS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yellowknife C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0237228.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02465_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18194_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bg.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Troll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-core.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\SETUP.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14693_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107658.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Tripoli C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Setup.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Person.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN002.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\notConnectedStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01470_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\WhiteboxMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN096.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-execution.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\InformationIcon.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XIMAGE3B.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\keytool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\add_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18229_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TipsImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTaskIconMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\TYPE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\QUERIES\MSN MoneyCentral Investor Major Indicies.iqy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Vostok C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\search_background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PowerPoint.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00686_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\BTOPENWORLD.COM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\OmdProject.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\Office64MUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0235319.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENVELOPE.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadco.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\ShadesOfBlue.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18201_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESTS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGZIPC.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PRRTINST.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WING1.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ModifiedTelespace.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\EmptyDatabase.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-7 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.data\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\imap.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\rmid.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\psuser_64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\orbd.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\java.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00687_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196364.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XLLEX.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART2.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePageStyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked-loading.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101862.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Austin.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21336_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Hobart C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387591.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15275_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Choibalsan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\square_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-javahelp.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\dumpmeta.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\info.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287024.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WSSFilesToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FOLDPROJ.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\JAWTAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\picturePuzzle.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\34.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215710.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299763.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.DEV_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BANNER.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\wab32res.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\be\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\LINE.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKREQ.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZCARD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\9.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroBroker.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\DAO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Trek.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\Management.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.BusinessData.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Dataset.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\27.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Bissau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157167.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR7F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\ViewHeaderPreview.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\navBack.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\sidebar.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00276_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OCRHC.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows NT\Accessories\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_play.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00612_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0240695.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\33.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_pt_BR.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-queries.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01478U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\ELPHRG01.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\en.ttt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382944.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02261_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10268_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\CGMIMP32.FNT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105306.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216612.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00578_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_Off.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Monrovia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.TTS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Premium.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\PYCC.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Module.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0185604.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_OliveGreen.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Microsoft.Office.Infopath.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceDaYi.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-windows.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\net.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00526_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341344.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00523_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15276_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\TexturedBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\DBGHELP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jsse.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DataViewIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Moncton C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\AXIS.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Equity.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\README.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01395_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR26F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR23F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\STSLIST.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_CN.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Creston C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\rjmx.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-attach.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\SLINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153087.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02755U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Adelaide C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_FormsHomePage.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dili C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-cli.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\hprof.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212219.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\OFFISUPP.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-today.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\39.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0160590.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00382_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR7B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Dawson C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152594.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WZCNFLCT.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\attention.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.access C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsImageTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-desk.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\boot_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382967.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18243_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\LightSpirit.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00154_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21332_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Mail\en-US\msoeres.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\uk.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EADOCUMENTAPPROVAL_INIT.XSN C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsdt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Amman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099175.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Country.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\en-US\MpEvMsg.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\OrangeCircles.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00807_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00934_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR14F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPUNCT.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Media Player\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-utilities.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\blank.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_LightSpirit.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\System.AddIn.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\search_background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Melbourne C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado20.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\wab32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01761_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sao_Paulo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santarem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Indiana\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Tallinn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Newsprint.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR35B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\AddToViewArrowMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Algiers C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository_1.1.300.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\timeZones.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\LAUNCH.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Mail\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\SATIN.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00148_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PSWAVY.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01742_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdaremr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01634_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198020.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\SpeechEngines\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\WindowsAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105414.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0230558.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10298_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eu.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Phoenix C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileOffMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveNewsletter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Client.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\fontmanager.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsdl_image_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00449_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\images\bing.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\plugin2\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00190_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Thatch.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\ContentDirectory.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaorar.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePageScript.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hardware Tracker.fdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_left_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187893.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\end_review.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153514.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\id.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\info.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01618_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\Xlate_Init.xsn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECURE.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-sendopts.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\amd64\jvm.cfg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151041.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\contbig.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\jfluid-server_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jp2native.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Vancouver C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\jsprofilerui.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107744.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OMSSMS.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Entity.Design.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086424.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\ieinstal.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105298.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PPINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\VVIEWER.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01561_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jdwp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\AUTHORS.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Messenger.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\Microsoft.mshtml.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\PROOF\MSLID.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msdaprst.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105386.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Updater.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\ROAD_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Opulent.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition - Customized.fdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-plaf.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-explorer.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lt\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msadomd28.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_increaseindent.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginMergeFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Pangnirtung C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Temp\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-uisupport.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Palmer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EDGE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CRANE.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sampler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.inject_1.0.0.v20091030.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-5 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.ComponentModel.DataAnnotations.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212701.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\J0115875.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\adojavas.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsHomePage.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\IMPMAIL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\include\jni.h C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\invalid32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\qipcap64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00037_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199661.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.InfoPath.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\STOCKS.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02743G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OWSHLP10.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLLIBR.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\mlib_image.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\core_visualvm.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Shared Gadgets\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\5.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.swf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\MSB1ENFR.ITS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\MSB1AR.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sw.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\db\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187825.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLR.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormToolImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\attention.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignright.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00175_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02158_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0172035.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNoteSyncPC.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_hail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.jetty_3.0.200.v20131021-1843.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ro.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\mn\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19986_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14539_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14845_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\TOOLICON.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceArray.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.util_1.0.500.v20130404-1337.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105638.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_OliveGreen.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageMaskSmall.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01162_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152414.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14982_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OIMG.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-execution.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\AD.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\QUAD.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15057_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\management.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01013_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21520_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR50F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Groove.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.ID.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\JAWTAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02413_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02444_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR1F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jakarta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SONORA\SONORA.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Danmarkshavn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ONLNTCOMLIB.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\WMPSideShowGadget.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00705_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME36.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ENVELOPE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\grayStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Cocos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\core_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01849_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01330_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.DE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCAL.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Indianapolis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\PICTIM32.FLT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02028K.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pt_BR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\RECOVR32.CNV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0304861.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCDDSF.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12\Microsoft.Office.InfoPath.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\HICCUP.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGHEADING.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\npjp2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Casey C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\Timeline_is.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Prague C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\WMPSideShowGadget.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Publisher.en-us\PublisherMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02155_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01931J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESNL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PPCORE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Library\SOLVER\SOLVER.XLAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ca.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-io-ui.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\ARCTIC.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBENDF98.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_no.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\content-types.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00247_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\STSLIST.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\libvlccore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MAPIR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOSTYLE.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mac.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03224I.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\flyout.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-middle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\PST8PDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.LTS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLADDR.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Rio_Gallegos C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\topnav.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Abidjan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Noronha C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\MSBuild\Microsoft\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libgme_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00116_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-3 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01680_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0146142.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00914_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR13F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nl.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\ICE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcer.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\handler.reg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EAST_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198025.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\TextConv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00423_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)greenStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-options.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215709.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Santiago C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can.hyp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dhaka C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\25.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.en-us\SETUP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00623_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02071U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.password.template C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\reader\filename.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382939.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME32.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\calendar.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands_3.6.100.v20140528-1422.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\ink\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt04.hsp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0233070.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Berlin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\kinit.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02068_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Waveform.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18227_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Sydney C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00478_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPICCAP.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jli.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LABEL98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\en-US\msaddsr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-execution.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fa.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00269_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107458.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\StaticText.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.BR.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Stars.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw48.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Empty.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\play_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02282_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcfr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199465.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02041_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02093_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01240_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01268_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL016.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGN98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00160_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\TipsImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCH98SP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SHAREPOINTPROVIDER.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\HxRuntime.HxS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\BHOINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00152_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145373.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\cursors.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-modules-appui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Sts.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-keymap.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\dailymotion.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw32.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateOnDemand.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15020_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCHDREQ.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AUDIOSEARCHMAIN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSOHEVI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Waveform.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bn.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActions.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\sidebar.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\launcher.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107708.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115844.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\1.3.35.452\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15018_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers\computericon.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNOteFilter.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Photo Viewer\en-US\PhotoAcq.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1665.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.events_3.0.0.draft20060413_v201105210656.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\zu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\WindowsPowerShell\Configuration\Schema\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\msdbg2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03041I.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR42F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\MpOAV.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187849.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18251_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DATE.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\26.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\divider-horizontal.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-io.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03466_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf_3.4.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\gstreamer-lite.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jsoundds.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200611.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\kcms.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293240.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME14.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\orbd.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105244.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_choosefont.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Makassar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\calendar.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151045.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03459_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewAttachmentIconsMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Easter C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Beirut C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03380I.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00367_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\TexturedBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Media Player\Media Renderer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\intf\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msaddsr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\msadc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Bahia_Banderas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\QUAD\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEMANAGED.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ieproxy.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\COPYRIGHT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs-nio2.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-2 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadrh15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\A3DUtility.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\open_original_form.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01744_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-disable.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)greenStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proofing.en-us\Proofing.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPEQU532.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02464_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\3082\MSGR3ES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_ja.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Guadalcanal C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ml\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04195_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0234000.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUNGLE.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00098_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.di.extensions_0.12.0.v20140417-2033.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00178_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\IPMS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GROOVEMN.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityResume.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\Documentation.url C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santo_Domingo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00513_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7ES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)notConnectedStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Maldives C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\libarchive_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00435_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE01797_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382926.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XML2WORD.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107750.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02897J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR32F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\SNEEZE.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.io_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Lindeman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\NBDoc.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Full.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR33F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ulaanbaatar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15058_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\validation.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\logo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\OFFICE10.MMW C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\en-US\sbdrop.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSGR3EN.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00272_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.CN.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\PLANNERS.ONE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\VSTAClientPkg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200383.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\InkSeg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Clarity.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME43.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Vancouver C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UTC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151073.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EntityPickerIntl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\handsafe.reg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\acro20.lng C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN01165_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OneNote\SendToOneNoteUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\wmpnscfg.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\OSetupPS.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Policies\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\CR_02A57.tmp\setup.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Adjacency.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTORE_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\Templates\Genko_1.jtp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01193_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EMABLT32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Moscow C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\clock.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\email_initiator.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\msolui100.rll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME47.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\pack200.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\eula.rtf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FORM.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\deploy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaprsr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107728.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18189_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\PublicAssemblies\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\AccessibleHandler.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\NamedURLs.HxK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00084_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198226.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\MLA.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Guayaquil C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\highDpiImageSwap.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099163.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099171.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\APA.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\soniccolorconverter.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\cy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\drag.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\psuser.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE04050_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01244_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-dialogs.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01169_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN048.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Defender\en-US\MpAsDesc.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\flyout_background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Perspective.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Dialog.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextService.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\javaws.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+3 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\nio.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Atlantic\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\stream_extractor\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libgl_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BOLDSTRI\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\wab32res.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02470U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\IPM.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\La_Rioja C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\ROGERS.COM.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msado26.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-templates.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw120.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\engphon.env C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\AddIns.store C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0214934.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Essential.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FOLDPROJ.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\43.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\common.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libkate_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153299.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL01565_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR9F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows NT\TableTextService\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSTINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\flyout.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\ado\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02282_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0205466.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Generic.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CNFRES.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.BusinessApplications.RuntimeUi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\core\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBCOLOR.SCM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-uihandler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\access-bridge-64.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ks_IN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libdummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10335_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\INFOMAIL.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORT.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPICCAP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIGN.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\VIEW.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Esl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Athens C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\ONFILTER.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\weather.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341738.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sv.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIconMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Casual.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\RSSFeeds.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\COMPASS.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01569_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Merida C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Triedit\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00790_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00466_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZLIB.ACCDE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Uzhgorod C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\crashreporter-override.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ReviewRouting_Review.xsn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\WMPDMC.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Adak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\35.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OCT.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00145_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02153_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18213_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14984_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.css.sac_1.3.1.v200903091627.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Microsoft.Synchronization.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\ADO210.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-services.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\snmp.acl.template C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sampler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\eBook.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_lv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\wmplayer.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187851.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceAmharic.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\skin.catalog C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKREQS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Edmonton C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+7 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01246_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143748.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18197_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\profile.jfc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Journal\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Concourse.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Equity.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_shmem.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103812.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASK.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_fi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00057_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libttml_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ccme_base.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187859.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSACCESS.DEV_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe AIR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STUDIO\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR45F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR8B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL108.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Mozilla Maintenance Service\logs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javac.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PROFILE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02092_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\14\Built-In Building Blocks.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_underline.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\be.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_double_orange.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSODCW.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\management.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh87 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\mshwgst.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01196_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00532_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18223_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MYSL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\SBCGLOBAL.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxmedia.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirectdraw_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\CURRENCY.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BIZFORM.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_flyout.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ko.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Blanc-Sablon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libdirectory_demux_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\rtf_bullets.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DVDHM.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Faroe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Europe\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\sbdrop.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONINTL.REST.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\ActiveTabImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\setup_wm.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\cpyr.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02252_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion\DiscussionToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gl.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Almaty C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bishkek C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_win7.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-search.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Glace_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_sun.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\Synchronization.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\BIB.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187863.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00127_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\OliveGreen.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-views.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ACCTBOX.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Abidjan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-remote.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\library.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18241_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR3B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\MarkupIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\logging.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWCUTCHR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Status Report.fdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00242_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21306_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.InfoPath.Client.Internal.CLRHost.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB6.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\weather.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\dcpr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\is\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\jsdbgui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105974.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL044.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\awt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00372_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00795_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\AssemblyInfoInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00297_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01154_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\YST9 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02053J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR50F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLNOTER.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIcons.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARBB.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pt_PT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\MSOHEV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15034_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\WSSFilesToolHomePageBackground.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterBold.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\BASMLA.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\CALSO98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\classlist C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\fi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Reunion C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCDDSUI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR37F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART11.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Maroon.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.lng C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_am.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\86.0.4240.111\86.0.4240.111_chrome_installer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387895.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\DELETE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWRECC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01682_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\LightSpirit.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02407_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\tab_on.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Iqaluit C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\boot.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util-lookup.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annots.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\SpeechEngines\Microsoft\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107026.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-applemenu.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01160_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292270.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART1.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBTRAP.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Belgrade C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Chuuk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Metlakatla C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\README.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\WordMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\oc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\be\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01145_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02466U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\Main.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryResume.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Microsoft.Synchronization.Data.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\gimap.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02009_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02424_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01221K.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01293_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18226_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\GRIPMASK.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\en-US\PhotoAcq.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\km\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099178.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\System\ado\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00351_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_sr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ar.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POSTCARD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\SIDEBARVERTBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NBOOK_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293238.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Office Word 2003 Look.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libx264_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\policytool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10267_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FORM.JS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nl.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Niue C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\mobile_equalizer.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_es.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\wsdetect.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\vstoee.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\sql70.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105390.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\COMPASS\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Denver C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Updater.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR43B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\calendars.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\DADSHIRT.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02446_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10337_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SECRECL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL078.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Users.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\blank.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\main.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309598.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR43F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0150861.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0233665.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Aqtobe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\vi.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\hrtfs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSPTLS.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Resolute C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\WebToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\az.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tbilisi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\visualization\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\LAYERS.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\AccessWeb\CLNTWRAP.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\43.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232797.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\glib-lite.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\distribute_form.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08868_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\LoginDialogBackground.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\1033\Class.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Johannesburg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Manaus C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099173.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18256_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME03.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\RM.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OriginMergeLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ms\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.properties.src C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunjce_provider.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaSansDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Ndjamena C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00132_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\MSART10.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\SIST02.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBCAL.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\WPGIMP32.FLT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105338.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\net.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287644.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18230_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\flavormap.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\Welcome.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\cli.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216874.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00170_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\security\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\hint_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00330_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10308_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00437_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DOCL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0212661.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialMergeLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\buttons.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBlue.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\or\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\OfficeMUI.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Training.potx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\vlm_export.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CMNTY_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\about.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028191654.pma C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\HST10 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Apex.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0230876.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OMSINTL.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR51F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\br.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\en-US\DVDMaker.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Petersburg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\javafx-mx.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CAPSULES\CAPSULES.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14868_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Library\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\FLYER98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdarem.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\en-US\msoeres.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02296_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02736U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Pushpin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\splash.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Matamoros C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00224_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\DELIMDOS.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\OriginFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7EN.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151581.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\freebl3.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\keytool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-lib-uihandler.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\servertool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\trusted.libraries C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01251_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD19988_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239943.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-options-keymap.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Toronto C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\oeimport.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\authplay.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00610_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDCAT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Budapest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Media Player\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00172_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BOAT.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02270_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\localizedStrings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\eclipse_update_120.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Yekaterinburg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libanaglyph_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239955.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\BriefcaseIcon.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management\jmxremote.access C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\STRTEDGE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00799_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107146.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02106_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\meta\art\01_googleimage.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoDev.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayenne C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Help\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\adobepdf.xdc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02754U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\az\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178460.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01046J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14594_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia_Banderas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Shared24x24Images.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKDECS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00191_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Distinctive.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\AMERITECH.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\DEEPBLUE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02097_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0282928.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_decreaseindent.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Anadyr C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\button_right_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\STORYBB.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Country.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\Mawson C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\WSS_DocLib.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bn_IN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14792_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15023_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BAN98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7EN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382954.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL087.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\rmic.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\defaults\pref\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174315.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196060.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0196358.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prcr.x3d C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GR8GALRY.GRA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCWIZ\ACWZMAIN.ACCDE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02055_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsHomePage.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_SlateBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Students.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\VCTRN_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msxactps.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02748G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\SEAMARBL.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\Media Renderer\DMR_120.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Stockholm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ko_KR.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-nodes.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\currency.data C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\8.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Routing.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\bin\server\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Matamoros C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\vdk150.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15156_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR30F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OL.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\wmpshare.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL109.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ZoomIconsMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0075478.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185842.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239967.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Earthy.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Baghdad C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\Media Renderer\avtransport.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105530.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107150.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REC.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1036\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\adcjavas.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01069_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153313.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\keytool.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\smtp.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105506.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0285484.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382931.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\notification_helper.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153273.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02578_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21322_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XLSLICER.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107746.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\INVITE.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\librtpvideo_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\item_hover_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Vdk10.rst C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\SketchIconImages.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+5 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\reveal_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LAYERS\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00853_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsMacroTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-api.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\wsgen.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPREARM.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\CASHREG.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\en-US\MpAsDesc.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Maputo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATH_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jar.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views_3.7.0.v20140408-0703.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODTXT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0301076.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR5B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\STRTEDGE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_el.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153305.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287642.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Technic.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Fiji C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbytools.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241781.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00305_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01563_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OFFRHD.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\CSharp\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\idlj.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\RESUME.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\Common.fxh C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\elevation_service.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Mendoza C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\EXITEM.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7FR.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\New_Salem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\EXPEDITN\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\handsafe.reg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00092_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Origin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\LASER.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-full_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382962.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Krasnoyarsk C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\security\javaws.policy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18199_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-oql.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01329_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01065_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107130.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232803.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_super.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS01639_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD00155_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MORPH9.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGTOC.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tijuana C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Miquelon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00694_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02958_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+11 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\batch_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libuleaddvaudio_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\desktop.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdate.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\jsprofilerui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Angles.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Urumqi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Media Player\Visualizations\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_chromecast_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00021_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02398_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\BORDERS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Defender\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\lua\liblua_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\cpu.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_search_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\JAVA_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\APPTS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\as90.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\penusa.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00443_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02208U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15073_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\MSVCR71.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\APPT.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\viewDblClick.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\TableTextServiceAmharic.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\EquityFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Zurich C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\twitch.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341439.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0158007.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\DiscussionToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-heapdump.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\penjpn.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL058.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WITHCOMP.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\jvm.cfg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02405_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD.DEV_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPUNCT.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Paramaribo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jhat.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Aqtau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ja\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WksConv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\iedvtool.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactHigh.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR36F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBCONV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_hov.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152878.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01368_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Couture.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterToolTemplates.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Bucharest C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\video_chroma\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css\localizedSettings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AXSLE.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0157831.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\PAWPRINT.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FALL_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02441_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00788_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_High.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\reviews_sent.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Internet Explorer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBUI6.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL012.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09031_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18221_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME55.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSCOL11.PPD C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\INDUST\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\msader15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.OPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHSRN.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XMLSDK5.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montreal C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.ths C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\JSProfilerCore.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105250.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105266.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Concourse.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21348_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ENV98SP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Vostok C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\FAX\MedianFax.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\TECHTOOL.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\SuspendSync.i64 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0102762.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0171685.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01777_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help_3.6.0.v20130326-1254.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssLogo.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Elemental.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Waveform.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\http.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\ONLINE.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-progress-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.CO.NZ.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\7-Zip\Lang\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libgain_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\main.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Spelling.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18180_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Runtime\x86\resources\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libswscale_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-utilities.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\default_thumb.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\en-US\wab32res.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086432.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01843_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18252_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Civic.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\JUDGESCH.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\sqmapi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-print.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\oledbjvs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Pushpin.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Author2XML.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00274_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-disable.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsIncomingImageSmall.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util-lookup_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.sun.el_2.2.0.v201303151357.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Honolulu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\wmlaunch.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01793_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199475.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\wmpnssci.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02950_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02069J.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\Hierarchy.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Tucuman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Barbados C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\readme.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\flyout.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Bears.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21309_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR13F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\WEBEMAIL.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+8 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\graph_up.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15277_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_off.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\drvDX8.x3d C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe Root Certificate.cer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR42F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CSS7DATA0009.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SCDRESTL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\.eclipseproduct C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00040_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115867.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down_BIDI.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\GIFIMP32.FLT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386485.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Media.accdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST5EDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107024.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\VeriSignLogo.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\INLAUNCH.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\settings.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Peacock.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152890.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\TABMASK.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_vi.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\am.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Bishkek C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\1033\MAPISHELLR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02058U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00780L.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL097.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\picturePuzzle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145669.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\SpaceSelector.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Argentina\Cordoba C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01630_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00212_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.di_1.4.0.v20140414-1837.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\EET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\en-US\WMPDMC.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CRANINST.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00452_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0234657.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\trusted.libraries C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0238959.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143754.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7cm_fr.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\DESIGNER.ONE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\libxml2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\PipelineSegments.store C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_SlateBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\anevia_streams.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Bears.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\CT_ROOTS.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Places\ALARM.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SENDTO.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Microsoft.Office.Interop.InfoPath.Xml.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ENVELOPR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Apia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Etc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\Identity-V C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ug.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03236_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0148309.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_FileHighMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.ssl_1.0.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdadc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14985_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-lib-uihandler.xml_hidden C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\en-US\ieinstal.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199429.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_left_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145904.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0233018.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14710_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-text.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libmpg123_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\msinfo32.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105710.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ASCIIENG.LNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh87 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\VSTA\Bin\VSTAProject.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01183_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD10358_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\ehshellLogo.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)alertIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199423.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR15F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-11 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEEXCH.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00957_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02439_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRINTL32.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\ACEODBC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\86.0.4240.111\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382942.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382969.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\playlist\liveleak.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Campo_Grande C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yerevan C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\libEGL.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0283209.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado28.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lindeman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ia\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\ReadOutLoud.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152882.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386267.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Monrovia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01241_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15134_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONBttnPPT.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BS53BOXS.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bn\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Informix.xsl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21338_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\BCSAddin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_VelvetRose.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\OrielLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\en-US\cpu.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Brussels C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-snaptracer.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195260.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers\RELAY.CER C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\validation.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Text.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\favicon.ico C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\images\Video-48.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\ANALYS32.XLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\artifacts.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00444_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Pontianak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\preloaded_data.pb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jsdt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadomd.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\gstreamer-lite.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185806.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00494_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\BHOINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL095.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04369_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\38.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\en-US\msdaremr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0250997.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE05710_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR2B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\README-JDK.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OEMPRINT.CAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTITS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\dnsns.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00438_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Civic.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\IPEDINTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR20F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\30.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Pitcairn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\omni.ja C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RMNSQUE\RMNSQUE.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04326_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\BUTTON.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\precomplete C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH02298_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\IEAWSDC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\release C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\MUSIC_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\WMPNSSUI.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-snaptracer.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NAMECONTROLPROXY.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ca.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0284916.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\Filters.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodbig.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN00932_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\XLINTL32.DLL.IDX_DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01607U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03379I.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMIMES.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\settings.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jrunscript.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\klist.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\VGX\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Cayman C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-4.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00687_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107288.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21335_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\BREAK.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\1036\MSGR3FR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jmx.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\WebKit.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198377.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SY00110_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_Groove.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Oral C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\management-agent.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103262.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DigitalInk.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\xjc.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\xul.dll.sig C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Internet Explorer\ie9props.propdesc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107484.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00011_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions\arrow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImages.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chihuahua C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Marengo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00074_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18231_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ContactPicker.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\PublicFunctions.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.TW.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7ES.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\WINWORD_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pl.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-coredump.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297759.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VGX\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\msdatasrc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kabul C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\JPEGIM32.FLT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341634.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03425I.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299611.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tirane C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Waveform.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santarem C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-util_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-6 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Media Player\en-US\wmlaunch.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\directshowtap.ax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\MSMAPI\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\WT61ES.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\DirectDB.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-threaddump.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\settings.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Apothecary.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DissolveAnother.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSORES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178932.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TR00402_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\NotifierUpArrow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libscte18_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-tools.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\ktab.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Hermosillo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\30.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02009_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\ViewHeaderPreview.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.policy C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_globalstyle.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\London C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLFLTR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\adovbs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14831_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21422_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185796.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02040U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\atl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152708.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Style\CHICAGO.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\AST4ADT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\NAVBARV.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\MARQUEE.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ExecutiveMergeLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\flight_recorder.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Macau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341455.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_rainy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_windy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Noronha C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\VisioCustom.propdesc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libcaf_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Stars.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN04191_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD08758_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\DataServices\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Efate C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaer.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.DEV_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_hevc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00932_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00834_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-undocked-3.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00299_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Thatch.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\South_Georgia C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\clock.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090087.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105292.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239079.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18239_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NL7MODELS000A.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\PACBELL.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ApothecaryMergeLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00486_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\IRIS\IRIS.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Google\Update\Install\{A281FEAF-27B6-47DD-B77C-12C478D10099}\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\adcvbs.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Indian\Christmas C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EXPLR_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02169_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\de.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02039U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152432.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\5.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPFT632.CNV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BS00174_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0232393.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT.DEV_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PROOF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceme35.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Iqaluit C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099197.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN01164_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Teal.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mset7.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWLAY32.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked-loading.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mouseout.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR4F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\currency.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\PST8 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\STRTEDGE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153508.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0153518.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Urban.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\bg_GreenTea.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR19F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-favorites.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GKWord.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\instrument.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\mozavcodec.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01172_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00096_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\IN00118_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00681_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00479_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-heapwalker.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Apex.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_right.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\jli.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Grid.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01296_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\NETWORK.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0090149.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MUAUTH.CAB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR30B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\VelvetRose.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-modules.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macGrey.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-core-kit.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Regina C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341447.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cambridge_Bay C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_h.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\javaw.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\browser\features\[email protected] C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\msoe.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\v1.0\Documentation\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bPrev-hot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0172193.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00256_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0103850.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174952.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceer35EN.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Pacific\Tongatapu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212953.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE06049_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\SMSS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN020.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\create_stream.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\offset_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\misc\libstats_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\System\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH00235_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Sakhalin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\hxdsui.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\AXIS.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME25.CSS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152694.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR28B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_Country.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSTH7EN.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\DADSHIRT.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\splashscreen.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01060_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222015.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\ZoneInfoMappings C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Moncton C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\AccessMUISet.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199307.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02134_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\triangle.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\WANS.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\INFOML.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\CHEVRON.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\pdmproxy100.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\MCABOUT.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02957_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00255_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10302_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Helsinki C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKACCS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Casual.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\modules\host.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216540.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue\tab_on.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-4 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\lg\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21305_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\INFOPATHEDITOR_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ReviewRouting_Init.xsn C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\New_Skins.url C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00586_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01304G.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Pushpin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT+12 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\NOTICE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\wlsrvc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BABY_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384888.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR44B.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\46.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Chisinau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui_2.3.0.v20140404-1657.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\cronometer.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18202_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115863.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-masterfs.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\w2k_lsa_auth.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281008.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Effects\Slipstream.eftx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\updater.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\MedianResume.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00234_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\control\libntservice_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Media Player\WMPDMC.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0286068.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\DESKSAM.SAM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\validation.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_hover.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lt.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AGMGPUOptIn.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\POSTS.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\spacebackupiconsmask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-ui.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\sunec.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02757U.BMP C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SL00712_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadox.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0183574.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR25F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\MeetingIconMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Nipigon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvm.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\CIEXYZ.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\HST C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\pencht.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105272.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02116_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\OutlineToolIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Maroon.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\GREETING.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-full.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Urban.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\alert_obj.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked-loading.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OIS_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-previous-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Word.en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\tile_bezel.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\La_Paz C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodicon.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0187895.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mahe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Volgograd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\settings.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RIPPLE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HM00426_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\44.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\th\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR16F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_gray_few-showers.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPFT532.CNV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\square_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281632.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\MST7MDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libvnc_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00720_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kamchatka C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\skins\winamp2.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\attention.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Defender\MsMpLics.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui_4.0.100.v20140401-0608.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mk.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\MakeAccessible.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInTray.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0145361.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02369_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\SAVE.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert\HEADER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Mail\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\COPYING.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\LEVEL\LEVEL.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\FPSRVUTL.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Elemental.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299587.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\LETTHEAD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css\RSSFeeds.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.lucene.analysis_3.5.0.v20120725-1805.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143749.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\ACCVDTUI.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jstatd.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01242_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GRAPH_COL.HXC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Class.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR47F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiItalic.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.runtime_0.10.0.v201209301036.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\en-US\Journal.exe.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\en-US\MSPVWCTL.DLL.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0287408.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00197_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15022_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PSRCHLEX.DAT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImageMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DigSig.api C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HH01875_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293570.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR1F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Zurich C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB00673L.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Perspective.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\RTF_BOLD.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-2 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Gambier C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-settings.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\POST98SP.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\ink\skchobj.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Jakarta C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02024_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_increaseindent.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\EMAIL.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03257_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SPACER.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_alignleft.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Journal\en-US\NBMapTIP.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sa.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\javafx-font.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PIXEL\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKREQL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_pressed.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuala_Lumpur C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\El_Aaiun C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SPRING\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281640.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REMOTES.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLMIME.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ja.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.ui_1.1.200.v20130626-2037.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\St_Johns C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02790_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Dubai C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXCEL_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB.HXS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_left.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Peacock.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09194_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_spellcheck.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench_3.106.1.v20140827-1737.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Lisbon C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\it.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLV.XLS C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\console_view.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\cmm\LINEAR_RGB.pf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0199727.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\1033\OFFICE10.MML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\NOTES.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EssentialReport.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup-impl.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Etc\GMT-3 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\METCONV.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Bibliography\Author2String.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0290548.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02450_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297707.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Mail\WinMail.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\docs.crx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-core.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\WindowsPowerShell\Configuration\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14882_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\si.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01074_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0241037.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02617_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0293828.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.AU.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCHUR98.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieMergeLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)redStateIcon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\THMBNAIL.PNG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Marengo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\ach\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\modern_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\9.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_02.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\button_mid_over.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\2.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\cryptocme2.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_et.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199483.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_s.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00921_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Casual.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ko.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\9.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0178348.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_issue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\sqloledb.rll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105230.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0172067.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Urban.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\pop3.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\rtf_hyperlink.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGWEBPQT.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RESEND.CFG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ICE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107262.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Stationery\1033\PAWPRINT.HTM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nome C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\EXPTOOWS.XLA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\OLMAILR.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_rest.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\BIBUtils.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02451_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01238_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Dubai C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-output2.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\org-netbeans-core_visualvm.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office14\NAMEEXT.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382966.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01354_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Portable Devices\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfxrt.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\applet\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS9CRNRH.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\.lastModified C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-utilities.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jre7\lib\zi\Asia\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATERMAR\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msadcs.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00392_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099169.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0337280.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\Things\COUPLER.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099184.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\REFINED.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0086384.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe AIR\sentinel C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO02227_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\LightSpirit.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00543_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeLinguistic.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VBA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieLetter.dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCAL.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\F12.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_right.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0199303.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\handler.reg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSHY7ES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\instrument.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\calendar_single_orange.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02265_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-TW.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_blue_partly-cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00783_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\STUBBY2.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\UnformattedNumeric.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MEDIA\SUCTION.WAV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSIDEBR.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsVersion1Warning.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21296_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\SplashImage.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\license.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di_1.0.0.v20140328-2112.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\1033\14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tashkent C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-ui.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0292982.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLTASK.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12\Microsoft.Office.Infopath.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation_1.2.100.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7fr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Garden.htm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0186362.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18209_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\SEARCH.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\RSSFeeds.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\org-openide-modules_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Background_Loading.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00428_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0174639.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0175361.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-spi-actions.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\mscss7cm_es.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\LINES.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\WaitUnlock.docm C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00163_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0168644.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-5 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14869_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00018_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00833_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\PDIR11F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rainy_River C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked-loading.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\OOFL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB5A.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Sync Framework\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityMergeLetter.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\ssv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\blacklist C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-GB.pak C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-heapdump.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD09664_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00923_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD01548_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange\background.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN058.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Internet Explorer\DiagnosticsHub_is.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions_Generic.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15170_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\WET C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck\TAB_ON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\BTINTERNET.NET.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssv.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado25.tlb C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\setup.ini C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00017_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0299171.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SlateBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Portable Devices\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\msdfmap.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\ACTIVITL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\glow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\logging.properties C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop\slideshow_glass_frame.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PROOF\MSSP7EN.dub C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip32.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\java_crw_demo.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0212751.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Median.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\EquityReport.Dotx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\es.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\jfr\default.jfc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\ado\adojavas.inc C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152622.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\utilityfunctions.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-progress.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216858.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\XLSTART\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_box_top.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00411_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\OUTLOOK.DEV_COL.HXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02074_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\bg_FormsHomePageBlank.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_left_disabled.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_foggy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jmap.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA7\1033\VBLR6.CHM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0200279.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime\TAB_OFF.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\OLNOTE.FAE C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PTXT9.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\keystore\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Buenos_Aires C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Halifax C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\plugins\misc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\16.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\NetworkServerControl.bat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106146.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\1033\xlsrvintl.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCINFO.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kathmandu C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libremap_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\ZX______.PFB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0332268.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PS10TARG.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Panama C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Macau C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\system.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\UmOutlookStrings.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\include\win32\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107134.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Apex.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\StarterNotificationDescriptors.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerEvaluators.exsd C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Eula.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BD10890_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\CommsOutgoingImageSmall.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\1px.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01770_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Dublin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Europe\Andorra C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\RTF_BOLD.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\NL7Data0011.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SCNPST64.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceca35.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSIDEBRV.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\trad_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vienna C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105588.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_TexturedBlue.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN111.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Inuvik C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyrun.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\bin\npt.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD01170_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD02116_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGSTORY.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can03.ths C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_hr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0151063.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OMML2MML.XSL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Manila C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.jrockit.mc.rcp.product_root_5.5.0.165303 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\deploy\splash.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Australia\Sydney C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Proof.fr\Proof.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_en-GB.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\javafx-iio.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Stationery\Garden.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\msdaosp.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\rtf_italic.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\DATETIME.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB1A.BDR C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sa.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00165_.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216600.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\32.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\ECLIPSE.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01218_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Trek.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\8.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jstat.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-visual.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-templates.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\base-docked.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\delete_over.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\Ole DB\sqlxmlx.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CDLMSO.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_ContactLow.jpg C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplateRTL.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\wlsrvc.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0239063.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-actions.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\fonts\LucidaBrightDemiItalic.ttf C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00670_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\leftnav.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\WATER\PREVIEW.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00564_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00417_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\OliveGreen.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.console_1.1.0.v20140131-1639.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLENDS\BLENDS.INF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCHUR11.POC C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewFrame.html C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Windows Photo Viewer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado15.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\stop_collection_data.gif C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\Help\Keywords.HxK C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152606.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN00217_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143744.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Indiana\Indianapolis C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\wsdetect.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\CLASSIC1.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\JNGLE_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\AppConfigurationInternal.zip C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_snow.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\jfluid-server_ja.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-coredump.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libdirect3d11_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185780.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\ChessIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\19.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kuala_Lumpur C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.35.452\goopdateres_tr.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0292278.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue\BUTTON.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\library.js C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Sakhalin C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\telnet.luac C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\gadget.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5EDT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00350_.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvm.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\CANYON.ELM C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Document Themes 14\Slipstream.thmx C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\TRANSMGR.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Customer Support.fdt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectToolsetIconImagesMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Visual Studio 8\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-compat.xml C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\SystemV\MST7 C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105504.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105600.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0222021.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Sts2.css C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files (x86)\Microsoft Synchronization Services\ADO.NET\v1.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_cloudy.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\America\El_Salvador C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\add_down.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Cairo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\ext\jaccess.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Mozilla Firefox\gmp-clearkey\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_On.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\WT61FR.LEX C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107526.WMF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBAR.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\0.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGLBL002.XML C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\COPYRIGHT C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Kolkata C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\icon.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\TASKL.ICO C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_HighMask.bmp C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_m.png C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382925.JPG C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR35F.GIF C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSWORD.OLB C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libstl_plugin.dll C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcor.dll.mui C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\HTECH_01.MID C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGBORDER.DPV C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\TWCUTLIN.DLL C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
File created C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_Classes\Local Settings C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_Classes\Local Settings C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_Classes\Local Settings C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff C:\Windows\explorer.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots C:\Windows\explorer.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\explorer.exe N/A

Suspicious behavior: RenamesItself

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\1076028349.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\explorer.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\DllHost.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A
N/A N/A C:\Windows\explorer.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1080 wrote to memory of 1808 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Windows\SysWOW64\cmd.exe
PID 1080 wrote to memory of 1808 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Windows\SysWOW64\cmd.exe
PID 1080 wrote to memory of 1808 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Windows\SysWOW64\cmd.exe
PID 1080 wrote to memory of 1808 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Windows\SysWOW64\cmd.exe
PID 1080 wrote to memory of 1108 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Users\Admin\AppData\Local\Temp\35045.exe
PID 1080 wrote to memory of 1108 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Users\Admin\AppData\Local\Temp\35045.exe
PID 1080 wrote to memory of 1108 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Users\Admin\AppData\Local\Temp\35045.exe
PID 1080 wrote to memory of 1108 N/A C:\Users\Admin\AppData\Local\Temp\a.exe C:\Users\Admin\AppData\Local\Temp\35045.exe
PID 1108 wrote to memory of 952 N/A C:\Users\Admin\AppData\Local\Temp\35045.exe C:\120162634617678\winsvcs.exe
PID 1108 wrote to memory of 952 N/A C:\Users\Admin\AppData\Local\Temp\35045.exe C:\120162634617678\winsvcs.exe
PID 1108 wrote to memory of 952 N/A C:\Users\Admin\AppData\Local\Temp\35045.exe C:\120162634617678\winsvcs.exe
PID 1108 wrote to memory of 952 N/A C:\Users\Admin\AppData\Local\Temp\35045.exe C:\120162634617678\winsvcs.exe
PID 952 wrote to memory of 1212 N/A C:\120162634617678\winsvcs.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe
PID 952 wrote to memory of 1212 N/A C:\120162634617678\winsvcs.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe
PID 952 wrote to memory of 1212 N/A C:\120162634617678\winsvcs.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe
PID 952 wrote to memory of 1212 N/A C:\120162634617678\winsvcs.exe C:\Users\Admin\AppData\Local\Temp\1076028349.exe

Processes

C:\Users\Admin\AppData\Local\Temp\a.exe

"C:\Users\Admin\AppData\Local\Temp\a.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c start C:\Users\Admin\AppData\Local\Temp\10387.jpg

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}

C:\Users\Admin\AppData\Local\Temp\35045.exe

C:\Users\Admin\AppData\Local\Temp\35045.exe

C:\120162634617678\winsvcs.exe

C:\120162634617678\winsvcs.exe

C:\Users\Admin\AppData\Local\Temp\1076028349.exe

C:\Users\Admin\AppData\Local\Temp\1076028349.exe

C:\Windows\explorer.exe

explorer.exe

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x4f8

C:\Windows\explorer.exe

explorer.exe

C:\Windows\explorer.exe

explorer.exe

Network

Country Destination Domain Proto
N/A 8.8.8.8:53 trik.ws udp
N/A 217.8.117.10:8080 trik.ws tcp
N/A 217.8.117.10:8080 trik.ws tcp
N/A 217.8.117.10:8080 trik.ws tcp
N/A 8.8.8.8:53 304049943.ws udp
N/A 64.70.19.203:8080 304049943.ws tcp

Files

memory/1584-0-0x000007FEF6930000-0x000007FEF6BAA000-memory.dmp

memory/1808-1-0x0000000000000000-mapping.dmp

\Users\Admin\AppData\Local\Temp\35045.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

memory/1108-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Temp\35045.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

C:\Users\Admin\AppData\Local\Temp\10387.jpg

MD5 a603d35899017876f5cbea46dbf223d4
SHA1 bbe3b9dc5ca78b399ae151afc0f03972e710b23b
SHA256 2fbfd083e8286b5715afc2b0f0b84dc11d211e18a4bdd3f9b4af6d5a2e833ab4
SHA512 14100ee11d31da7dc051600c66e175569ad6026a550fa1167e5ecffee0f84bd6487b65eec45e32ac2e2b9b5bc338a952657187945bab7530896294d6e4cbc78f

C:\Users\Admin\AppData\Local\Temp\35045.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

\120162634617678\winsvcs.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

memory/952-8-0x0000000000000000-mapping.dmp

C:\120162634617678\winsvcs.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

C:\120162634617678\winsvcs.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

\Users\Admin\AppData\Local\Temp\1076028349.exe

MD5 7d52884b375ce8b6182f1c53f0f1c496
SHA1 6b70e90b0dada8d93c61caa678e76ce2abcbc76b
SHA256 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021
SHA512 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515

\Users\Admin\AppData\Local\Temp\1076028349.exe

MD5 7d52884b375ce8b6182f1c53f0f1c496
SHA1 6b70e90b0dada8d93c61caa678e76ce2abcbc76b
SHA256 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021
SHA512 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515

C:\Users\Admin\AppData\Local\Temp\1076028349.exe

MD5 7d52884b375ce8b6182f1c53f0f1c496
SHA1 6b70e90b0dada8d93c61caa678e76ce2abcbc76b
SHA256 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021
SHA512 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515

memory/1212-13-0x0000000000000000-mapping.dmp

\120162634617678\winsvcs.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

\120162634617678\winsvcs.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

memory/1904-18-0x0000000003B50000-0x0000000003B51000-memory.dmp

memory/1308-19-0x0000000003780000-0x0000000003781000-memory.dmp

\??\M:\$RECYCLE.BIN\S-1-5-21-3825035466-2522850611-591511364-1000\desktop.ini

MD5 a526b9e7c716b3489d8cc062fbce4005
SHA1 2df502a944ff721241be20a9e449d2acd07e0312
SHA256 e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066
SHA512 d83d4c656c96c3d1809ad06ce78fa09a77781461c99109e4b81d1a186fc533a7e72d65a4cb7edf689eeccda8f687a13d3276f1111a1e72f7c3cd92a49bce0f88

memory/1308-23-0x0000000003780000-0x0000000003781000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\1076028349.exe

MD5 7d52884b375ce8b6182f1c53f0f1c496
SHA1 6b70e90b0dada8d93c61caa678e76ce2abcbc76b
SHA256 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021
SHA512 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515

memory/1576-26-0x0000000003F90000-0x0000000003F91000-memory.dmp

C:\Users\Public\Desktop\Adobe Reader 9.lnk.ReadMe

MD5 a3550476acc0f779a0ce244696153cfe
SHA1 0416bdc409bab7d6852513e7ccfc856d695949c2
SHA256 13272ad3279cd3f780822144b2c19703f0c81ab6a3a37278622365fc37ad4c12
SHA512 82c1d454a49857622aa746e57900e00303b1576f181b8d565efb3fa572c3be19416b33530a3edc8c004ac7800475f353a39665d31180cf8e7f84d721d74ed31a

C:\Users\Admin\Desktop\UnlockBlock.avi.ReadMe

MD5 59003ae0fcc13a60b8cebd16a3ea148b
SHA1 f681185ed5846458b99133f33fee5b52995c0bf0
SHA256 f6b5619eb4d37bd67d9b5cd92ccc8086d302a1682431d00161cc1500065e063a
SHA512 1d5a9ffc0865c3bd7715dfbd3497e81d9ded298b1f6748015e0551dea84f94579cc41fd1e2e18a357405975759578958aac319bf960be1cb509b007158c2ff49

C:\Users\Admin\Desktop\UnblockSet.au.ReadMe

MD5 810168777439cdce8d2ad5f062add3d5
SHA1 7293fe247477f6a57c9c67313e1dc90da85e7ea4
SHA256 724e98b2c238728e3d000e10d1603586bf4dc794b1e6b23f37346cde7a10c4a4
SHA512 7db56754421c67d761c0df8bf97c91e90e898ca4839af34d9ab21533069114e150c91e63d74e37267b34e1950f0dce38d92c48a3f31f8e00777e3434c73cd936

C:\Users\Admin\Desktop\UninstallRestore.m1v.ReadMe

MD5 887d12f451b8d009a2aae83441db2a13
SHA1 d013478b1b6ab199844198558c406fcee26b4897
SHA256 2e5f0792cef3b63756e156a1ffe47530d2f7896810a6302b1de4bdf7b641c363
SHA512 e4d4f36a1400ffc95bab08cfa53ad582d19c15d3def5ac9fdf585b80a10173b2ad44f13aedf2b2620c729cff629cee9ac650fbb2d86287de7e1189f70bc15057

C:\Users\Admin\Desktop\UnblockConvertFrom.DVR.ReadMe

MD5 5af5fbdd12247711c38ec24855a69a29
SHA1 850ad20f05ad49c3748fd959ca6609af3dde81ec
SHA256 5dae066c54cb3aade0e881136ef61c8721758589a34920df6028b40f17b0d222
SHA512 33f41bede523814159ee80b6b3a084b29ab20cf81ddd3e9510c8854c206c9deb841f5eb27667485f92e3c9948be5fb92506c747222918cd924413e3dc89a77e2

C:\Users\Public\Desktop\desktop.ini.ReadMe

MD5 fa77527ddc2adeb6a62271deb84e19a0
SHA1 3ee5ebfef7efda26f9734bfaaff51957f7700527
SHA256 6774a61775a0f1a9b972e63b4f7064a3160a89b182d0bf76a9882d8f56ff43de
SHA512 364c5ccb0ad00bb6ca9762d82819a2297503468e08308660e65b3c3960ff52368dca3eeab7de7114cc88aae0511d3d9e5b587620fca4591a4ed638996459e468

C:\Users\Public\Desktop\Firefox.lnk.ReadMe

MD5 a06f723c0eb928b58516dd8aebf38b89
SHA1 e72cd54944f5d7b8452fff7cff19a5b1264deec2
SHA256 f43cc862930cfa25595c24301b752e04e371cfa2bc49026a968df5f96a51417f
SHA512 4b6f17277fa3936d471397464858b60b298fe3442cf2a93bfffd266bd2282c799f81824928a4e2cf73fec985766622a71fd2a3d27edc9cf3d26f4a3ad29938ee

C:\Users\Admin\Desktop\SyncJoin.iso.ReadMe

MD5 bdc95ff91a66d1634d46278e107e0951
SHA1 739f790453ee2d8b915a526b8c15cfc36943fd28
SHA256 57eab59cd0a442b273c8e58decd37551d752da4dec2ddb6fff3ea9de7fe0477c
SHA512 8ed87d1c503b109376d0131dfb6baccbd2c8c9df5c2c3b7bc40ae73562839e8ec6f5e225d225de22df01aef1561fcd44226a3aa2d6732d79d3ff82c4834e733d

C:\Users\Admin\Desktop\Read_Me.txt

MD5 fbb87717e779a76e3489302ad9db6e6b
SHA1 b2308a9cb9a4d35e7ad19c49adc4a56e18372d7d
SHA256 db339060d0450f78a6e28d89690bb235e36c26eeab2f16887a23dea19b8499fc
SHA512 12e7d898dddc449a0c06a7d8d5c443742117b2e432ee46c805d5e852d67d34bc018e27b0d9e91b1de1759fa26328c18f5fa6a1a1239f23193cbc81a554547b31

C:\Users\Admin\Desktop\PushSend.mpg.ReadMe

MD5 8e7953a56028808845e9e4f8cd9802fe
SHA1 97ccf470fbef92a8fdbfca047fa006d4f7240bc5
SHA256 3d03ca8bbd1a4a74ac140c9f91728e08400a4db24d8019eb13f4db9f452cb710
SHA512 38c256a2ae26b2bb8e746f816b1814097f88f6dc0405140108e402a51ee9c49269ecd2aed9fa939927a2ccfd217d4e4abad751ed8360bcdadc2c3e91cb668323

C:\Users\Admin\Desktop\NewProtect.csv.ReadMe

MD5 47a71203f04cdebb53dbc7c79168e8ad
SHA1 74004cc491514a9c20ae0a3e78c31a317604a637
SHA256 7e57027ee36ae2dadf83e16b9e7b7bd4803a5c075fc9807238eeb32391a16d01
SHA512 5880ae2f320a5b7522a68b427949c072ed91129903bab01c23791b1a81875c559312985490e5089018d3d13ad61f411f8a5537321aee2460e8c5369e9266c2ff

C:\Users\Admin\Desktop\NewEnable.au.ReadMe

MD5 9f3c01a45bfa8bc89958cf2f0a420977
SHA1 df28a220f15f1f5febbde4cdae8c3b44e163c33c
SHA256 8fde1359b41f1ec8030cf751836eed89d318a778fd41e8f2754276520a5c8aa7
SHA512 39fff1d5113ee8ba34c807df9f598460cca660aba2637df64a1265f3351d25c69fa4ef2f1277b14de005c9fff22e30664d0a54a09bfee50144901561c6fc437f

C:\Users\Admin\Desktop\GrantUndo.iso.ReadMe

MD5 c7a415b8caf73fb7cae792afdb33f0a5
SHA1 889e61e720ee9c39ae309324462efb3d3de22176
SHA256 42d184b1df44c3990bca6699b3a281019b1d327999c8db3e10135be3b3f684dc
SHA512 fe903fe04c9fb8ff472a825faa12137fafcf0bca01f090f74abab53b07c9ebe597398e077290b44d76882cf016bf47d10f18021a8d5d6f13249ded265e775b2d

C:\Users\Admin\Desktop\GrantDeny.rm.ReadMe

MD5 5fcabf3ac1828800b05180d5353aa400
SHA1 42fa51b2c02d2b3a285804078451f643526de492
SHA256 8a11e30faa4345812faea782dcce70f8b2745ab29f593589b4b341718f34b083
SHA512 fd1c486b53feb520f0a90f9cc248cd77f428c66d4692f26947276efbed81d1df6cb2d0498e4cbee92cbbf70a5dc2d7488a4a32aca77a33e5d8c637185317b808

C:\Users\Admin\Desktop\DenyConnect.tif.ReadMe

MD5 6a4abe0332ebf650ff085c538f9d9700
SHA1 d601872904aed6a24bcfc3e516ff338eca1243f2
SHA256 426053e5104bb873e408ea9a49ee0161ee4c8516b3309c3a13faf5a104142fc7
SHA512 84e7e1fd24a6c38a84228d1ab86bed17a2dc48c4950d5f2e93c06cfdbfd6f381c72c20a96923e3ccc0eb41497715383e01d5bd7a2fba2de7ca39f19a60eea7bc

C:\Users\Admin\Desktop\CopyExit.vssx.ReadMe

MD5 a7b2a845af1dea59feaa2b50ac2a46e9
SHA1 b5da9b555819608e9a791c7d0c58b40c8d0a1ee7
SHA256 6d048aa133c088f5f1dac2a40d33fa7335e6c34c0eaa26c373c5dbc5922e70a2
SHA512 3880e68c42b85f8661b9a07a5aead6579e513979fd8e54773fe5fa876c69fae657d2260836d508b5fbcc5b1ad06c56a9d0e087abe168b2fb988e42f6d86e97ff

C:\Users\Admin\Desktop\CopySplit.AAC.ReadMe

MD5 7e32231998f14b46507c0980d39f1cc5
SHA1 83166382194a0e407a8ca10ea23644d3790cc7af
SHA256 5f64a18ef5e77ed612c847f184c88d6f17adc44ee91b45c33ccadf3f56a83b87
SHA512 f9747ffa956205be6fcd613d61fdb97a8637c6e93b5a23963881de21109ed22dc91683e86ec88d87416a1544bf1d4998dfbd5cd25c6683ccdb6f00b5148112ee

C:\Users\Admin\Desktop\DenyConnect.3g2.ReadMe

MD5 8007cf737a927fba8f36677c1ce31af2
SHA1 6eb7790a356270c4f2a4a8826baf260a7a5cef80
SHA256 afe7055f8bc13eec31e0d4a93ce1dbabbec306701d2db4716e07ee951880a312
SHA512 506a23ecee8d5211bdec87f01a014622d2919fd1dc58649e1c8e9996cc7685a7f18e1feda4ed01a31cf2ff4f64f4f6fb504f79416b3c9a94154c0cae42d34163

C:\Users\Admin\Desktop\desktop.ini.ReadMe

MD5 ac712555d33fc0912c21a4446a40e93c
SHA1 c571d7b5e1ea5ad34e714dff4be82b119b1e09ff
SHA256 264273125083adb014e33eda30bfd7696bc26d074c93b4cf49f19c020bef1a6a
SHA512 b0b669b58a4a0a352c278b43159336cd05ac278746ff4fb1128a2f730684b8c1f1e3334132da077554adc31f9cdb515dfcb5a6dfc81acb8cb319eac0cbb23ffd

C:\Users\Admin\Desktop\LimitBackup.ogg.ReadMe

MD5 379c13620e86bfb29189e3a7a4bc6660
SHA1 4983d75ade8744ff8111093f14b8335e074e6575
SHA256 3b2c0a3a888816362e4477b9b2046a8e099d49169e5292f34423be1b75ff3f32
SHA512 c74e1e1b0c060dfb05cd203ea18c448a7df036536a3bf6998e4b6b68cbe68b6487c9848eaa0460dd613a1dec512e926299cc8ce7df3a27d15d8df39040448bc7

C:\Users\Admin\Desktop\PublishJoin.aifc.ReadMe

MD5 ef7e03f4fac10131e97ca31d48d2e17b
SHA1 66daad09744448ce3f8f20a373d37773476e45b5
SHA256 df729413aa9579850d436f5271f1108e23acce068773ea7533555e5ba306cdd4
SHA512 c49563f139015c74f8b3b3a5cbd750bdcfb747295c520ecd5a414a35c3365fe22746ab93e753f99465a9c260e6dc259050cbf4d8dde7a099925bca73a195a42b

C:\Users\Admin\Desktop\TraceUnregister.wmf.ReadMe

MD5 0c48e22c7f8ffa6b8cf1008cbdf6262d
SHA1 639b302b7e68de0e64101cc1e0c1ae012279bd46
SHA256 fc4621c022750827abe7fecafde11feca6d556a6230a305a931612ff01e3a774
SHA512 fb288793e9275d32771b18a8076b58fc109c5336706808d2e8bb092b0137b658f2297f97c174dda1bda283c73505f96a9ea96b279896d5d0d8658a7c09e1287e

C:\Users\Public\Desktop\Google Chrome.lnk.ReadMe

MD5 764cc03a40deff4cb5b6f6f359b07df5
SHA1 2012857fe9f0b635e1cac2d5a480659a2353c0f2
SHA256 9d84579c78070fbfa6f668177fc9474e26106bc4ccd6f357daf086e1504e0933
SHA512 1c2daa5e84817f8a0f0e05ce5ba89c7f8a25c65572216a8b1534335595581e23ee039f067671e8c7e9897bd750a6e78e859c95623955a0fe58cfac9d067ee48f

C:\Users\Public\Desktop\Read_Me.txt

MD5 fbb87717e779a76e3489302ad9db6e6b
SHA1 b2308a9cb9a4d35e7ad19c49adc4a56e18372d7d
SHA256 db339060d0450f78a6e28d89690bb235e36c26eeab2f16887a23dea19b8499fc
SHA512 12e7d898dddc449a0c06a7d8d5c443742117b2e432ee46c805d5e852d67d34bc018e27b0d9e91b1de1759fa26328c18f5fa6a1a1239f23193cbc81a554547b31

C:\Users\Admin\Desktop\AssertConfirm.MTS.ReadMe

MD5 600eca07335ec17931337d14b1dc1de3
SHA1 5776139ef2281e8958ee38e8d8b7083c5982dcc9
SHA256 46f297b7e225ab5402229f9553e906857576b64b2fb3097d3ec1499ad2adf2b2
SHA512 4dc8b0f9bdbe6e0b8006226075a41c0cb25980eb434b8a1123be778dae31ad69558081646bcde60cdb34a92f7e48b2ebd7c1e949c9ad0ed666da94f1ad7252f9

C:\Users\Admin\Desktop\CloseAdd.tmp.ReadMe

MD5 c234e1edb67f7f3fcc633d7eae0bada9
SHA1 9b17edbff27c2f7117d56c7a8ec4eb8dd9182c7c
SHA256 20b1442263caf8572ccf3b849b66667362063507ee321ab751a155d084404e57
SHA512 7c19bbcb7f6722def19c363deb7d6b3c3ffc9fab72904564fdc589ce9fd1b51b1bad0b891cd2a8eedbab2c14e743b50b1711f6e7ae62060883f8e9d77f4635cd

C:\Users\Admin\Desktop\CompareClose.m4a.ReadMe

MD5 f92871653fc2431cc3b67036049eed95
SHA1 18eb71a8bbfa3938e2d5824a5bcef458e7449671
SHA256 4759d24600523dc9cd66e53a778c0b9a39a433482e0ccf03dab4ac1d31cba505
SHA512 8554468f0c60016ae6a47ed3674b3936985d60c81c70dda57f939efd0c9bc28b20dba690f4272e85034b499de2578aa4667ae8986d7cc2702d927d970b4a420b

C:\Users\Admin\Desktop\CompareResize.wav.ReadMe

MD5 6b2ac0cd6ae7a7a5278a4015bd6526e8
SHA1 f4c2a032fdaebe89f3be623e0190417656b6b67f
SHA256 0006f827a3356afbb0529b302ca2e38f1173b10388c7af01df20d6076f8fac28
SHA512 0d26a73366f8e8a5547e6a740102d34513a5c1fceeaaf3cbed1931d22a78616b616f59ca66ba0711d4119784ebbbfe4ccc4b90bda5658b062cf52dd6549c482c

C:\Users\Admin\Desktop\CompressSubmit.wmf.ReadMe

MD5 63f99d34c5e915e7afa568fc192952ec
SHA1 5af687a71552406f56a089ca77e098a3b1c5fd13
SHA256 5f168c1fd40206863a92551c2a62f77a59d8bd1b840f14fd67bd28057f5a105c
SHA512 45e8e5cdcb7120545d5eb66db1c8386b6990ef546f511e001881a716b69861c17a5ed72e2a463ed510bc8968b102cb26e92137eb0e06d5ca2d7a1f15429275bd

C:\Users\Admin\Desktop\ConvertFromClear.rm.ReadMe

MD5 44aea17eb2f5b7b5856e34147e8549ba
SHA1 6d04f9366fe9b9acc45c80b91136f07ebdf76cc4
SHA256 3cd17d804be4cb9af510f4bd022734da37752578b7343dd549d3306dba885560
SHA512 7ef177d2b39b65da847c0ca61b714fa03309d6d198b3186de831aef3a713490920df9bf84f0ce65ce7471cf63b19dab40b6173d36948b518497081df0456039b

C:\Users\Public\Desktop\VLC media player.lnk.ReadMe

MD5 357d78e5f61132d504a566d3db10a97c
SHA1 152cdb8d3e481f2ea2bd651a9b3c444af6a02d83
SHA256 17ed82122063edca81dfe32a65ab6ba066de9476a824f1deffc231d6591fecd5
SHA512 28346c03184899d8006aebbfd75e7077765702285b416d9e37f375dfa7ac8b075d061fe23c97bfd875f28d0bb9eec656e4752351b9b6804adb3ff4d84971fbbc

C:\Users\Admin\AppData\Local\Temp\WPDNSE\Read_Me.txt

MD5 fbb87717e779a76e3489302ad9db6e6b
SHA1 b2308a9cb9a4d35e7ad19c49adc4a56e18372d7d
SHA256 db339060d0450f78a6e28d89690bb235e36c26eeab2f16887a23dea19b8499fc
SHA512 12e7d898dddc449a0c06a7d8d5c443742117b2e432ee46c805d5e852d67d34bc018e27b0d9e91b1de1759fa26328c18f5fa6a1a1239f23193cbc81a554547b31

memory/1576-59-0x0000000003F90000-0x0000000003F91000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-11-05 20:58

Reported

2020-11-05 22:28

Platform

win10v20201028

Max time kernel

52s

Max time network

123s

Command Line

"C:\Users\Admin\AppData\Local\Temp\a.exe"

Signatures

Phorphiex Worm

worm trojan loader phorphiex

Windows security bypass

evasion trojan

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\10128.exe N/A
N/A N/A C:\20172306425313\winsvcs.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A

Windows security modification

evasion trojan
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1" C:\20172306425313\winsvcs.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1" C:\20172306425313\winsvcs.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1" C:\20172306425313\winsvcs.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1" C:\20172306425313\winsvcs.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\20172306425313\\winsvcs.exe" C:\Users\Admin\AppData\Local\Temp\10128.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3341490333-719741536-2920803124-1000\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Services = "C:\\20172306425313\\winsvcs.exe" C:\Users\Admin\AppData\Local\Temp\10128.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.data\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.workbench_3.106.1.v20140827-1737.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.DOC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.OleDbProvider.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tpcps.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pl.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\wxpr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcr120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial1-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\3RDPARTY C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-templates.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_f14\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\ClientEventLogMessages.man C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javah.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifestLoc.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-startup.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.ReportDesign.Forms.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ga.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Grayscale.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8.mp4 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\PROOF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\tzdb.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Garden.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\jfr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial1-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WWINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mr.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_win.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVManifest.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntime2019R_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\pt-BR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\th-TH\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\blacklisted.certs C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\BORDERS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\time-span-16.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\IGX.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eu.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\javacpl.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Slipstream.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WacLangPackEula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cy.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javacpl.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-xstate-l2-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-process-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\OMICAUTINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\launcher.win32.win32.x86_64.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\policytool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.BackEnd.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadce.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs-nio2.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-snaptracer.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_es.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\rjmx.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONGRAPHICS.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7cm_es.dub C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jarsigner.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-io_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64_3.103.1.v20140903-1947.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-annotations-common.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ConsumerSub_Bypass30-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE2.POTX C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\LICENSE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\core_visualvm.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Microsoft.Office.PolicyTips.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf_1.1.0.v20140408-1354.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\booklist.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk15\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Candara.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\STSLISTI.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\AugLoop\third-party-notices.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusDemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\msjet.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jjs.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_ja.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond-TrebuchetMs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\TelemetryDashboard.xltx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-heapwalker.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIntegration.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-explorer.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_LinkDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-math-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ca.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\java.policy C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiling.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-uisupport_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial1-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sqlpdw.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-multitabs.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\sqmapi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Internet Explorer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_f14\FA000000014 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lij.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.ui_4.0.100.v20140401-0608.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nl.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerView.PowerView.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_COL.HXT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Author2XML.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office-client15.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\msotelemetryintl.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\th\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONENGINE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_fr.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.reportviewer.common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue II.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\OpenSSL64.DllA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\lpc.win32.bundle C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-text.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-api.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\ru-RU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\external_extensions.json C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.descriptorProvider.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\release C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\Services\verisign.bmp C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\XLMACRO.CHM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Localytics.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\drive.crx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-keyring.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_KMS_ClientC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_COL.HXT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\it.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-windows.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\xjc.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL64.DllA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.update\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\rmic.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-nodes.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\javafx-src.zip C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\lcms.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019DemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jli.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jsoundds.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\correct.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\ir.idl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\et.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\day-of-week-16.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-dialogs.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\prism_sw.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives_1.1.100.v20140523-0116.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\klist.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ORGCINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-queries.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\86.0.4240.111.manifest C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.alert.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator_2.0.0.v20131217-1203.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql2000.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\wab32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\ea-sym.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Integration\Addons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\SetupMetrics\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.felix.gogo.command_0.10.0.v201209301215.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.Interfaces.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadrh15.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-selector-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\jce.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jjs.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable_1.4.1.v20140210-1835.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-uisupport.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jsdt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\gimap.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-services.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\ATPVBAEN.XLAM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-queries.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\unpack.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_profile.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\Triedit\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-actions_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-windows.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-ui.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\InputPersonalization.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\cmm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\GreenBubbles.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\servertool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-favorites.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Internet Explorer\SIGNUP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Violet.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\boot_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\IPSEventLogMsg.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\BIBFORM.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\basicstylish.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\TabTip.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\include\win32\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\invalid32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.contenttype_3.4.200.v20140207-1251.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\sv-SE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\fre\StartMenu_Win10_RTL.mp4 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mce.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Paper.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.commands_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.OAuth.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.uk-ua.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-remote.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvm.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\uk-UA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\mix.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msader15.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_ja_JP.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_f33\FA000000033 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hr.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_win7.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gu.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\instrument.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.Edm.NetFX35.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkServerCP C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\oskclearuibase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.fr-fr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sa.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-root.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\et\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\bin\server\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART1.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_zh_TW.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\gstreamer-lite.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496926556.profile.gz C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-sendopts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-loaders.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Ion Boardroom.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.felix.gogo.runtime_0.10.0.v201209301036.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ext_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-annotations-common.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipscsy.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jaas_nt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.commons.logging_1.1.1.v201101211721.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui_2.3.0.v20140404-1657.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\unpack200.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.jdp_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer_3.2.200.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mip_telemetry.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\jawt.lib C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\resource.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_zh_HK.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Packaging.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadco.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-processthreads-l1-1-1.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsnld.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\SOLVER32.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Internet Explorer\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Frosted Glass.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdaremr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-nodes.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\cursors.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hr-hr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\plugin2\npjp2.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Extreme Shadow.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uz.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\dt_shmem.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\sunec.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyrun.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\keytool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\vstoee100.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\serialver.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_zh_CN.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsen.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-options.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-cli.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_olv.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-api.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\split.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsymxb.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_f33\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\FindPush.ocx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7cm_en.dub C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QRYINT32.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\tzmappings C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\blacklisted.certs C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7wre_en.dub C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\COPYRIGHT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-convert-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bn.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\j2pcsc.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipssve.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kab.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\1033\Bibliography\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\rtscom.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-output2.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\t2k.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ar-sa.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\nio.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\1033\PowerPivotExcelClientAddIn.rll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_200_percent.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri-Cambria.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\hr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-output2.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher_1.3.0.v20140415-2008.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-modules.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.PPT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\EventSource.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\bg-BG\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\dropins\README.TXT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.net_1.2.200.v20120807-0927.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial1-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javac.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-core-kit.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Graph.exe.manifest C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000050\FA000000050 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FilterModule.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-applemenu.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.components.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\delete.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\Ole DB\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\net.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fi.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-execution.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.dll.config C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-nodes.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ta.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-GB.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\splash.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaTypewriterRegular.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-root-bridge-test.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sa.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.felix.gogo.shell_0.10.0.v201212101605.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\dragHandle.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\CT_ROOTS.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\SoftBlue.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\docs.crx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\tnameserv.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.FuzzyMatching.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\oskmenubase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\javacpl.cpl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Picasso.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fi-FI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-common.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\osknavbase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\decora_sse.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\desktop.ini C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\mashupcompression.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\nacl_irt_x86_64.nexe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.expressions_3.4.600.v20140128-0851.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msador28.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.services_1.2.1.v20140808-1251.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\rt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodicon.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-locale-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jsoundds.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-locale-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelCombinedFloatieModel.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_it.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\AppvIsvSubsystems32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Exchange.WebServices.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdaps.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt_1.1.1.v20140903-0821.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\jfr\default.jfc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\pt-PT\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\access-bridge-64.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe.config C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jhat.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net_1.2.200.v20140124-2013.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntryR_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\basicelegant.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jabswitch.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgeCalls.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\etc\visualvm.clusters C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-windows_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jabswitch.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_WHATSNEW.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-core.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\com-sun-tools-visualvm-modules-startup.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\EntityPicker.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\io.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\Microsoft.Ink.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsar.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONDIRECTX.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jcmd.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\splashscreen.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\TellMeExcel.nrr C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\SharedPerformance.man C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pl.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-file-l2-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.ProgressiveProcessing.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans_1.2.200.v20140214-0004.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSQRY32.CHM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\EXCEL.VisualElementsManifest.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\alert_obj.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\shaded.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaTypewriterBold.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\tr-TR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\ja-jp-sym.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\ktab.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\dblook.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\config.ini C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\McePerfCtr.man C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ne.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\cacerts C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_f3\FA000000003 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.event_1.3.100.v20140115-1647.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoDev.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core_2.3.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\blacklist C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\CSS7DATA0009.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\de.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\adovbs.inc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\te.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\kinit.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\MeasureUnpublish.reg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-xstate-l2-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\adcjavas.inc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496939244.profile.gz C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\BOMB.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOMessageProvider.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macTSFrame.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\c2rpridslicensefiles_auto.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC.HXS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\PYCC.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Banded Edge.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-visual.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\msvcp120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessDemoR_BypassTrial365-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office15\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\resources.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\plugin2\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_MoveNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\npt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\cldrdata.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\lpklegal.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\GRAY.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tr.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\boot.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\GRAPH.EXE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-api.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaSansRegular.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Configuration\ssn_high_group_info.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\ServiceWatcherSchedule.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\rmid.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\preface.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgePackages.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Georgia.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\pack200.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-processthreads-l1-1-1.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Times New Roman-Arial.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\glib-lite.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GR8GALRY.GRA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ast.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\as80.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\uk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lt.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunpkcs11.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javaws.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\amd64\jvm.cfg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-localization-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.EditorRibbon.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Green.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalDemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WordNaiveBayesCommandRanker.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\idlj.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientARMRefer_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MINSBROAMINGPROXY.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\QUERIES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\adcvbs.inc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\msvcr120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcDemoR_BypassTrial365-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-core-execution.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\hprof.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_sv.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\applet\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hwrusash.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\APASixthEditionOfficeOnline.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\Services\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-api-caching.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\sound.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hy.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsrom.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaSansRegular.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spl.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdasql.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-multibyte-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvApi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\locale\updater_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-loaders.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\cldrdata.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\w2k_lsa_auth.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496926306.profile.gz C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.annotation_1.2.0.v201401042248.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\misc.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqloledb.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\sl-SI\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_kor.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado25.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.ssl_1.0.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\tt.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\charsets.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\MSOSEC.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\asl-v20.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\PersonaSpy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\ShadesOfBlue.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\basicsimple.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado20.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\et.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.XLS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Bears.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Modeler.UI.rll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.ReportingServices.DataExtensions.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\zh-CN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Library\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.console_1.1.0.v20140131-1639.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\updater.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.Extensions.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fr-FR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\FA000000009 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-oql.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jfr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\US_export_policy.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Configuration\config.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig-office.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.DocumentServices.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Latn-RS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-RS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgeCalls.c C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\AccessRuntime2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\.eclipseproduct C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbynet.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\indxicon.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.actionProvider.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Roses.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Ion.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\ARROW.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\net.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcDemoR_BypassTrial365-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\he\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\javafx.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi_3.10.1.v20140909-1633.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000009\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.DataWarehouse.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSBARCODE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\cpprestsdk.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-multitabs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019DemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdfmap.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linesdistinctive.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.TransformDataByExample.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\GostName.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javaw.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-applemenu.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\setup.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientPreview_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\nl-NL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-remote.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7.wmv C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jmc.ini C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Riblet.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVOrchestration.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.EventSource.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadds.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientLangPack_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\sunmscapi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-runtime-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_f2\FA000000002 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\fontmanager.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000011\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\cmm\GRAY.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\msvcp120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\GRAPH.ICO C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipshe.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-explorer_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\CSS7DATA000A.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.http.registry_1.1.300.v20130402-1529.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.base.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Gill Sans MT.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.Interfaces.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lv.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\TrebuchetMs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProDemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.th-th.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7Handle.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-javahelp.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest1-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINDATAPROVIDER.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoDev.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\LICENSE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\BREEZE.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoBeta.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\Default.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-favorites.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-utility-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\minimalist.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\System.Spatial.NetFX35.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\GostTitle.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART4.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VGX\VGX.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-uisupport.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\management-agent.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-time-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\readme.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\am.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-services.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fr-FR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sr-spc.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\uk.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\th.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\it.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-search.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.sfx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.es-es.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\win32\jawt_md.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.dcfmui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsid.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-execution.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dt_socket.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linesstylish.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\System.Runtime.InteropServices.RuntimeInformation.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.update.configurator_3.3.300.v20140518-1928.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\localedata.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvm.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nb.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\dnsns.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\FA000000006 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_sw.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\ssv.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\GKPowerPoint.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Peacock.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-core.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\VVIEWRES.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Integral.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\DBGCORE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\TYPE.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\cacerts C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\prism_d3d.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\lt\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2iexp.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\dtplugin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\javafx-mx.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director_2.3.100.v20140224-1921.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\etc\visualvm.conf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\.lastModified C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\ja-JP\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\native2ascii.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-spi-actions.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-awt_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-explorer_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-windows.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Spatial.NetFX35.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fr-CA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\classes.jsa C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\jaccess.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\csi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_preferencestyle.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription1-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsym.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_f7\FA000000007 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-search_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fontconfig.properties.src C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ba.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightDemiItalic.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_w1\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Common.Wizard.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.http_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\CHART.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-time-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Document.XmlSerializers.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\sound.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\[email protected] C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.zh_CN_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\org-netbeans-modules-profiler_visualvm.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\ImportSkip.pot C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\mc.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-heapdump_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-timezone-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019DemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7zCon.sfx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\GKWord.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sl.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.common_3.6.200.v20130402-1505.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\orcl7.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fur.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipssrb.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-templates.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-services.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\C2R64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-ui.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\baseAltGr_rtl.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\policytool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\file_obj.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\Office16\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUICellModel.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\id.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-text.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\sk-SK\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.osmmui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\deploy.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\attach.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-charts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSO.ACL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-lib-uihandler.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\javafx_font_t2k.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\msipc.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-lib-uihandler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookicon.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.batik.css_1.7.0.v201011041433.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\sunjce_provider.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\AppXManifest.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\micaut.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\da\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\centered.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000008\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\charsets.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\applet\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\jvm.hprof.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_COL.HXC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_fr.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\.lastModified C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\LICENSE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation_1.2.100.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-util-enumerations.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.PowerBI.AdomdClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ko.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\youtube.crx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-options.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\javaws.policy C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\com.jrockit.mc.console.ui.notification_contexts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses\c2rpridslicensefiles_auto.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientOSub_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvSubsystemController.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_CopyDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Storage.XmlSerializers.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\excel-udf-host.win32.bundle C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse_2.1.200.v20140512-1650.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_de.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub_M365_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\db2v0801.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\v8_context_snapshot.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_KMS_ClientC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\AdHocReportingExcelClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\lt-LT\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jdwp.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.wordmui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Windows.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-snaptracer.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\nl.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.inject_1.0.0.v20091030.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ar.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_KMS_ClientC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\TPN.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\msadc\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt-br.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-nodes.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\instrument.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019DemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fy.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\currency.data C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\leftnav.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\JAWTAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\dropins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PPINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogoCanary.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-windows.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\MSOSEC.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\DocumentFormat.OpenXml.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\calendars.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\extcheck.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\classes.jsa C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.update\platform.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.property_1.4.200.v20140214-0004.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.fr-fr.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\Source Engine\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\cpprestsdk.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Core.NetFX35.V7.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.es-es.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\id.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\larrow.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-progress.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\javaws.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.bg-bg.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\trusted.libraries C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\org-openide-filesystems_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.MashupEngine.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tipresx.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-bootstrap.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\FlickAnimation.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoCanary.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019DemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jsdt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-common.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-ui.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office16\OSPP.HTM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Facet.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Green.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019DemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Office.Interop.Outlook.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\de\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javaw.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\glass.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013bw.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.rcp_4.3.100.v20141007-2301.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt_0.12.1.v20140903-1023.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-annotations-common.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\WindowsAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Office.Interop.Excel.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\LINEAR_RGB.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ru.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\kinit.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-editor-mimelookup-impl.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Integration\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\psfont.properties.ja C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\gl.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo_large.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-tw.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\EnableUnlock.wps C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-swing-plaf.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Practices.Unity.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\jsse.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Stars.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvStreamingManager.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe.config C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Document Themes 16\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteFreeR_Bypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hi.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ChakraCore.Debugger.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Word.Word.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\it\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-spi-quicksearch.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ja-jp.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\OFFICE16\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\nb-NO\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\keytool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Orange Circles.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\dsn.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-threaddump.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\ucrtbase.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART10.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.databinding_1.6.200.v20140528-1422.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.DataWarehouse.Interfaces.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository_1.1.300.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.reportviewer.winforms.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rightnav.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\SUCTION.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\psfontj2d.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-sampler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProDemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\verify.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hwrusalm.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\accessibility.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\nashorn.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVScripting.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\DataStreamerLibrary.dll.config C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019DemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_cs.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientVolumeLicense_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\jconsole.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\Xusage.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Franklin Gothic.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\hr-HR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\resources.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-bridge-office.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvmstat.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\meta-index C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-CN\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-compat.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-heap-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\excel.exe.manifest C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkClientCP C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util-lookup_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Office 2007 - 2010.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Office.PowerPivot.ExcelAddIn.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-windows.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\et-EE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\chstic.dgml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jpeg.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.server_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-execution.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sr.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jli.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-api-caching.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\FUNCRES.XLAM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.http.servlet_1.1.500.v20140318-1755.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sl.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\WHOOSH.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-text_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sa.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng2.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management-agent.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.metadataprovider.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\pl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\fxplugins.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusDemoR_BypassTrial365-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.Reporting.Common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\VOLTAGE.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-util.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\imap.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\jmxremote.password.template C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\fi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019DemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyoptionaltools.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Green Bubbles.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\GKExcel.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\pt-BR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART2.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-core.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\unpack.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\es-ES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jawt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\kcms.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\be.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-favorites.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\TellMeWord.nrr C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\orb.idl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\loc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsymb.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql_2.0.100.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2ssv.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\external_extensions.json C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup-impl.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-attach.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\CSIRESOURCES.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\DESIGNER\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\rmiregistry.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\sunmscapi.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ku-ckb.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3_0.12.0.v20140227-2118.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\he-IL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\plugin.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\de-DE\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\bundles.info C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\kn.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\AUTHOR.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-private-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Slice.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINSHELL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Schoolbook.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\SPPRedist.msi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\hive.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\adojavas.inc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl64.DllA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.identity_3.4.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\management\management.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tr-TR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher_1.3.0.v20140911-0143.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-compat.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-visual.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\ja\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msxactps.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychartplugin_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\decora_sse.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ro-RO\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fi.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.rcp.product_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.sat4j.pb_2.3.5.v201404071733.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-core-io-ui.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProDemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\RepoMan.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-PT.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\contbig.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsita.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-windows_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pl-pl.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\w2k_lsa_auth.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mip_upe_sdk.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ms.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text_3.9.1.v20140827-1810.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\ffjcext.zip C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\C2R64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalDemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\unpack200.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\Informix.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\access-bridge-64.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\ant-javafx.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\+Connect to New Data Source.odc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\resource.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk_1.0.300.v20140407-1803.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-print.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-filesystems.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red Orange.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_ViewOnly_ZeroGrace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_KMS_ClientC2R-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Office.Interop.Excel.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\HarvardAnglia2008OfficeOnline.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\wab32res.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\masterix.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-sampler.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\java.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7fr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\WPFEXTENSIONS.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-javahelp.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7en.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\elevation_service.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntryR_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\excelcnvpxy.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\wsdetect.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\profilerinterface.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InkDiv.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemuiset.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-process-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ky.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\License.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.security.ui_1.1.200.v20130626-2037.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\el-GR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado28.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteFreeR_Bypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_company.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\bg-BG\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.SqlServer.Configuration.SString.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\es-MX\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-multiview.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\tzmappings C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hr-HR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javacpl.cpl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.continuation_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-dialogs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs-nio2.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\deployJava1.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ms.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_COL.HXC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.common.16.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Models.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.ConnectionUI.Dialog.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelFloatieXLEditTextModel.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\otkloadr_x64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-progress-ui.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsel.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\ro-RO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\setEmbeddedCP C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\bg.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\java-rmi.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Garden.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\README-JDK.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mshwgst.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\new-trigger-wiz.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-coredump.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_COL.HXC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_ko.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\ssvagent.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\jni.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\jvm.hprof.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javapackager.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-dialogs_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\java.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\LogoBeta.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fontconfig.bfc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\dblook C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\artifacts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_es.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\startNetworkServer.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\lcms.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ro-ro.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-impl.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActions.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\concrt140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Interop.MSDASC.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.DataWarehouse.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\ca\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\VERSION.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\bwclassic.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelInterProviderRanker.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jps.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-compat_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_ko.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\az.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\security\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper_1.0.400.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\hijrah-config-umalqura.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\WindowsAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-lib-uihandler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-swing-plaf.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-filesystem-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hu.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\DRUMROLL.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\symbase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\pt.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledb32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mng.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jsadebugd.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\date-span-16.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_COL.HXT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fontconfig.properties.src C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\dtplugin\npdeployJava1.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javafx_font.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\.lock C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluTSFrame.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXPTOOWS.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\lt.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.batik.util.gui_1.7.0.v200903091627.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\locale\updater_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-heapwalker.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\MergeUninstall.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\jmxremote.access C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\sunec.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-output2.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\amd64\jvm.cfg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\et-EE\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-execution_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\lv-LV\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ko.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-core.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\accessibility.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\management\snmp.acl.template C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\gl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-runtime-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUIFormulaBarModel.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\TextConv\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremDemoR_BypassTrial365-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\th.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.artifact.repository.prefs C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.http.jetty_3.0.200.v20131021-1843.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-core-kit.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-options.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\cmm\PYCC.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdaprsr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_altgr.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7cm_fr.dub C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\sysinfo.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\zipfs.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.manifest C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\BlockResolve.asx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\hi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.property.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.jsp.jasper.registry_1.0.300.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Office Theme.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalDemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mraut.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Client\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\si.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javaws.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\include\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-TW.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.di_1.0.0.v20140328-2112.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sr-latn-rs.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sv.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\pt-BR.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-awt.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\Welcome.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-applemenu.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derby.war C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ug.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\splashscreen.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\deploy\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial Black-Arial.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\co.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\ij C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART3.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jsound.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\icudtl.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Garamond.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqloledb.rll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\setEmbeddedCP.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MML2OMML.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\FrequentOfficeUpdateSchedule.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalDemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\wsdetect.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office16\OSPP.VBS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-sampler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Office 2007 - 2010.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBluHandle.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Subtle Solids.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightItalic.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk16\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\SIGNUP\install.ins C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\sa-jdi.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.Diagnostics.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\he.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntimeR_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-stdio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.alert.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-multibyte-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SLINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sl-si.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\Stationery\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\vi.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-attach.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-uisupport.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\Classic.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.jobs_3.6.0.v20140424-0053.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_de_DE.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Edm.NetFX35.V7.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\IpsMigrationPlugin.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\AdeModule.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jp2iexp.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\LocalizedStrings.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-options-api.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-lib-uihandler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-dialogs_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-masterfs.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\ShapeCollector.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\jdwpTransport.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hwrenclm.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\BI-Report.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\kinit.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\console_view.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1665.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-sendopts.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-options.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Reflection.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_pt_BR.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\j2pcsc.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ro.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019DemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsymk.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\ISO690Nmerical.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.da-dk.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\YEAR.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\VGX\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\3082\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Proof.Culture.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7es.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glossy.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.net.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsymt.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-conio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\NetworkServerControl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-fallback.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_f2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\appletviewer.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.ibm.icu_52.1.0.v201404241930.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\Addons\OneDriveSetup.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientVolumeLicense2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.vsto C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe.config C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\ado\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\orbd.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntry2019R_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ja-JP\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaSansDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-execution.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\is.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\COPYRIGHT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.di_1.4.0.v20140414-1837.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-settings.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jpeg.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands_0.10.2.v20140424-2344.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\dcpr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Interceptor.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\notification_helper.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jawt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dcpr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16ConsumerPerp_Bypass30-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ko-KR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hr.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-split.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.commands_3.6.100.v20140528-1422.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_MoveDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Document Parts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pt-br.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\org-openide-modules.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.OleDbInterop.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\conticon.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-explorer.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\el-GR\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest1-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\fontmanager.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations_2.4.0.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office16\OSPPREARM.EXE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\management.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-options-keymap.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\XLLEX.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_win7.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-masterfs-nio2.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\flight_recorder.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\classlist C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\lv-LV\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\send-email-16.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.RsClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\rmiregistry.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\msvcp140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_KMS_ClientC2R-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-search_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\ij.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\rt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\3082\MSO.ACL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Bears.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-snaptracer.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Milk Glass.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\kk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\CASHREG.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\meta-index C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins_1.1.200.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_KMS_ClientC2R-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ja.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiling.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\server\jvm.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\Welcome.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.update.configurator.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\NOTICE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dt_shmem.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\TURABIAN.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART8.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\db\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PPT_WHATSNEW.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7wre_es.dub C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-phonetic.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipscat.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\JavaAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.SapClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\cs.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-io-ui.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mscss7wre_fr.dub C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\core_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\IpsMigrationPlugin.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.bidi_0.10.0.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\ado\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_LinkDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-startup.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\management.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\plugin2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-modules_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\ConvertToWait.cab C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-multitabs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-windows.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.dll.sig C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-utilities.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\zip.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\16\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-stil.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-io.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\TelemetryLog.xltx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jjs.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-print.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiler_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Arial-Times New Roman.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.VisualStudio.Tools.Applications.Runtime.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicTSFrame.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\vcruntime140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-environment-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.VisualStudio.OLE.Interop.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.tr-tr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jfxmedia.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-spi-actions.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.shared.Office.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Library\EUROTOOL.XLAM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\classfile_constants.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\VSTO\10.0\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.fi-fi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_es.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\local_policy.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-print.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1036\MSO.ACL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.text_3.5.300.v20130515-1451.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark_mac.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\FOLDER.ICO C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mfc140u.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-sampler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\win32\jni_md.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-favorites_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-io-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-charts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_KMS_ClientC2R-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\gstreamer-lite.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.et-ee.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-actions.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Bibliography\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\msvcp120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\ro\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Document Parts\1033\16\Built-In Building Blocks.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.common_2.10.1.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.security_1.2.0.v20130424-1801.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ru-RU\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\oledb32r.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019MSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\en-us\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\HAMMER.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\History.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\pl-PL\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\StreamServer.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\locale\jfluid-server_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\PowerPivotExcelClientAddIn.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbytools.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\CLVIEW.EXE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.he-il.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-swing-outline.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRINTL32.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\nb-NO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mip_core.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WORD_WHATSNEW.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrome.7z C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Corbel.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\an.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\java.policy C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\klist.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\TellMePowerPoint.nrr C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\id\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_elf.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\RELEASE-NOTES.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\psfont.properties.ja C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodbig.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado60.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-uihandler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\management\jmxremote.access C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Inset.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-heap-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\preloaded_data.pb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\+NewSQLServerConnection.odc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART6.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART7.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-util.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\fr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-appui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019DemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\PowerPivotExcelClientAddIn.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelTellMeOnnxModel.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk15\windows-amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sa_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-oql.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\tools.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusDemoR_BypassTrial365-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jdb.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\CHAKRACORE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\gu.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\default_apps\gmail.crx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-actions.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\java.security C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\tabskb.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedbck2.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ps.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\sl-SI\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\cmm\CIEXYZ.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL.HXS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_f3\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.de-de.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.el_2.2.0.v201303151357.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.OData.NetFX35.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sv-se.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\EXPLODE.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\.lastModified C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\sRGB.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app_1.0.300.v20140228-1829.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-awt.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec64.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019DemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.it-it.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_zh_TW.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\CLICK.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\oskpredbase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaTypewriterBold.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\prism_common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange Red.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\images\bing.ico C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\glib-lite.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\1423496937509.profile.gz C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\[email protected] C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\en-US\wab32res.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RIntLoc.en-us.16.msi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCHART.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfxswt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.text.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-cli.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\GB.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\psfontj2d.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.Common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-actions_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-utility-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-applemenu_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32ww.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.core.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\cs.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\stopNetworkServer.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.dom.events_3.0.0.draft20060413_v201105210656.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\lt-LT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Median.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\zh-cn.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\README.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\uk.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\jfxrt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-remote.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\jfxrt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription1-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_sv.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\Office16\SLERROR.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\AugLoop\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\VSTO\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macGrey.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.el-gr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\hijrah-config-umalqura.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipshrv.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\eclipse_update_120.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000050\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ktab.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\XLSLICER.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.Common.v4.0.Utilities.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\en-US.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui_3.106.0.v20140812-1751.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\FileSystemMetadata.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\IEAWSDC.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Cambria.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Extensions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javafxpackager.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\policytool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_d3d.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\CIEXYZ.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\nashorn.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.lt-lt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2native.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\hprof-16.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\SubsystemController.man C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookbig.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\jfr\profile.jfc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\BHOINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sq.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\org-netbeans-core_visualvm.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\osfFPA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\hmmapi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-charts_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\DirectDB.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\logging.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SkypeForBusinessBasic2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-modules-appui_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsjpn.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\InvokeEnable.pps C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jmx.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\pack200.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hwrlatinlm.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\vi.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-utility-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\AccessRuntime_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessEntry2019R_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.DataStreamer.Excel.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mk.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsnor.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\sawindbg.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4.ssl_1.0.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\it-IT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.powerpointmui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\etc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\da.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightRegular.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\awt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ssvagent.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Interceptor.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Excel.Themes.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsptb.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\keytool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\mip_clienttelemetry.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\dt_socket.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\mshwLatin.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_globalstyle.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_KMS_ClientC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pt-pt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription1-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\1036\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql70.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightRegular.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fr.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sk.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\t2k.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.contexts_1.3.100.v20140407-1019.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bn.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql90.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.Initialization.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Gallery.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-explorer.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.oracle.jmc.executable.win32.win32.x86_64_5.5.0 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\org-openide-util.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\jfluid-server-15.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest1-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Roses.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\servertool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_zh_HK.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\packager.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\yo.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\org-openide-filesystems_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\ext\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\verify.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\tr\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.Authorization.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ru-ru.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.vi-vn.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.concurrent_1.1.0.v20130327-1442.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-attach.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\Ole DB\en-US\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientARMRefer2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\concrt140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-profiling_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.PPT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Office.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\TAG.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\dnsns.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\management\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Layout.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\CSS7DATA000C.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Violet II.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\topnav.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_KMS_ClientC2R-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\content-types.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\da-DK\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\hu.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\ko\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\en.ttt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16ConsumerPerp_Bypass30-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\jvm.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Office 2007 - 2010.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBlue.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\LyncVDI_Eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\jvmti.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\SmallLogo.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\javafx_font.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_fr.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ExcelNaiveBayesCommandRanker.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Shims.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSSRINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\pop3.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\jfluid-server.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProDemoR_BypassTrial180-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadox28.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-favorites.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32mui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.WindowsAzure.StorageClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ka.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\d3dcompiler_47.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART13.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_pt_BR.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Marquee.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado27.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-text.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-io-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\OFFICE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\cpyr.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\STSLIST.CHM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\net.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\diagnostic-command-16.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-BA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_pwa_launcher.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\sv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\Triedit\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mac.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-heapdump.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\README.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\meta-index C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\help.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\EXCELPLUGINCORE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PowerPointNaiveBayesCommandRanker.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javadoc.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.alert_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-text_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-ui.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019DemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_KMS_ClientC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\nio.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\plugin2\msvcr100.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\JAWTAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\profilerinterface.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\el.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-queries_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\C2R32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\COIN.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-process-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\System.ValueTuple.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\MSInfo\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jrunscript.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\wsgen.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-string-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.UI.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\va.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-utilities.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.ConnectionUI.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\jvm.lib C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\smtp.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\java-rmi.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\fre\StartMenu_Win10.mp4 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\NetworkServerControl.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-queries.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCONTROL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART14.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\servertool.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.excelmui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019DemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\glass.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\local_policy.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Green Yellow.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.osmuxmui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsrus.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Document.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fa.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_basestyle.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.proofing.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\CHICAGO.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado21.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\pack200.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jabswitch.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mru_on_win7.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_zh_TW.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeServiceBypassR_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART11.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\j2pkcs11.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\manifest.json C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\officeinventoryagentlogon.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\EntityDataHandler.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\javap.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\sv-SE\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.HostIntegration.Connectors.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Library\SOLVER\SOLVER.XLAM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvVirtualization.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Internet Explorer\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-tools.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\ZeroByteFile C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Red Violet.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdatl3.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\FlickLearningWizard.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.services_1.1.0.v20140328-1925.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-settings.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\SAMPLES\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\af.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\dtplugin\deployJava1.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Tw Cen MT-Rockwell.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ro.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Configuration\card_terms_dict.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.base.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.ReportingServices.AdHoc.Excel.Client.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_MoveDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util-lookup_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\officeinventoryagentfallback.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.DataIntegration.FuzzyMatchingCommon.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-conio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4-dark.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jp2native.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PREVIEWTEMPLATE.POTX C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.SapBwProvider.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\ct.sym C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-oql.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ja.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsymsb.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-spi-actions.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.filesystem_1.4.100.v20140514-1614.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-actions.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-ui_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\VERSION.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\THIRDPARTYLICENSEREADME.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\derby_common.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.base_4.0.200.v20141007-2301.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-swing-tabcontrol.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-execution.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\javaws.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\sqmapi_x64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\APPLAUSE.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\eula.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\dt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPHandle.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkClientCP.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-awt_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linessimple.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\he-IL\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\LICENSE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ospintl.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLN.DOC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCOMMON.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ja-jp.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt_0.12.100.v20140530-1436.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_COL.HXT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\ru\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\AppvIsvSubsystems64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ca.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-progress.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelCtxUICellLayoutModel.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.ecore.xmi_2.10.1.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription4-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\it-IT\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\jvmticmlr.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\client-issuance-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXPTOOWS.XLA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\join.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mshwLatin.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\kcms.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\cmm\sRGB.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\bg\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\offreg.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sk-sk.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jmx.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ar.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ru.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\bwcapitalized.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\System.Web.Mvc.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\sql120.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\LASER.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcor.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.preferences_3.5.200.v20140224-1527.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\mfc140u.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-timezone-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_ko_KR.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse_1.1.200.v20140414-0825.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\Integrator.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\eclipse_update_120.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription1-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-sendopts_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-core-multiview.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\fre\StartMenu_Win8_RTL.mp4 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.ReportingServices.QueryDesigners.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\msinfo32.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ta.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.ecore_2.10.1.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\da.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunec.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.common_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jmx_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.zh-cn.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\snmp.acl.template C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\jfxswt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\mn.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\deploy.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jdwp.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\tnameserv.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremDemoR_BypassTrial365-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fa.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\bci.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.AnalysisServices.AdomdClientUI.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\oracle.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-GB\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-io.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-profiler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Orange.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\en-GB\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-openide-util-enumerations.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\fre\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\content-types.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\XLINTL32.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.commons.codec_1.6.0.v201305230611.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\bwnumbered.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\no\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-templates.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\AppVLP.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsplk.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART9.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin_2.0.100.v20131209-2144.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunmscapi.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\sunec.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\win32_LinkNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_COL.HXT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART15.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClientIsv.man C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT.HXS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-coredump.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-modules-appui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\currency.data C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.attach_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-api.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\j2pkcs11.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_MAKC2R-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipstr.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Top Shadow.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusEDUR_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\flat_officeFontsPreview.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticattribute.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-queries.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\tr.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-execution.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\boot_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Wisp.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\i640.cab.cat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jdeps.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\java_crw_demo.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\ko-KR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-api-search.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-api_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\lib\fonts\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\ffjcext.zip C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\server\Xusage.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.win32.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\management.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RInt.16.msi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVFileSystemMetadata.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\ml.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\MEIPreload\manifest.json C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\macHandle.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-windows_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nn.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\klist.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\profile.jfc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\logging.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-io.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-options_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\ClientCapabilities.json C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\title.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVCatalog.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-stdio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRLEX.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\client_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\Content.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\plugin.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019DemoR_BypassTrial180-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Client.AddinTelemetry.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.cs-cz.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerActionExceptionHandlers.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\PROCDB.XLAM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MINSBPROXY.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-api.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\msvcp120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelFloatieTextModel.bin C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-selector-api_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\orbd.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_ja.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp2-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019VL_MAK_AE-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\WIND.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jmc.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvm.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-coredump.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXCEL_K_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.dll.manifest C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\descript.ion C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\wsimport.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npdeployJava1.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-private-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-remote_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-compat_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-3102-0000-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ORGCHART.CHM C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.XLHost.Modeler.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\cs\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\FlickLearningWizard.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\stopNetworkServer C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\sysinfo C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-filesystem-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\JavaAccessBridge-64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\locale\jfluid-server_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\tzdb.dat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow Orange.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremDemoR_BypassTrial365-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\LyncBasic_Eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-visual.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-compat.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019VL_MAK_AE-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\OrangeCircles.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator_1.1.0.v20131217-1203.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD.HXS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART12.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_it.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-filesystems.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\zipfs.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsymsl.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jinfo.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-keyring-impl.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-lib-uihandler.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16EnterpriseVL_Bypass30-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\pt-PT\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\zh-TW\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msador15.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_school.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\jce.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\FormatPing.7z C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\IEShims.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jconsole.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-api-annotations-common_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.kk-kz.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.jrockit.mc.rcp.product_root_5.5.0.165303 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-charts.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libEGL.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\VisualElements\Logo.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox_1.0.500.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\mr.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multiview_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\1033\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\el\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-api-visual.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-environment-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-common.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.services_3.4.0.v20140312-2051.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.util_1.0.500.v20130404-1337.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\management\jmxremote.password.template C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jaas_nt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\eula.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\rmiregistry.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdarem.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\flavormap.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pkeyconfig.companion.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-locale-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.zh-tw.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jfr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Data.OData.Query.NetFX35.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\org-openide-filesystems.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\sk\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPOlive.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jfxmedia.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\CHIMES.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\doclib.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jvisualvm.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\resources.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Warm.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Shades of Blue.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyclient.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-util-lookup.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.16.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ms-my.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsptg.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.security_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019XC2RVL_MAKC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ko-kr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.ProviderShared.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-options_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvmstat.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jfxwebkit.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaSansDemiBold.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\eventlog_provider.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.components.ui_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\javaws.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages_zh_CN.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019MSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msdaprst.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.sun.el_2.2.0.v201303151357.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.io_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.osgi.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\el.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.AdomdClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-tools.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028183044.pma C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProCO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\ext.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Core.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\lv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\PackageManifests\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaTypewriterRegular.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_pt_BR.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker_1.1.200.v20131119-0908.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core-io-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MsoAriaCApiWrapper.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\IVY.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-nodes_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\es-MX\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.syntheticnotification.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\CLVWINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Author2String.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\sv.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.intro_3.4.200.v20130326-1254.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-application-views.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\hu-HU\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\zh-TW\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\es\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\INTLDATE.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\7-Zip\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\splash.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadomd.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O16EnterpriseVL_Bypass30-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_f7\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.AdomdDataExtension.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup-impl.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\IEEE2006OfficeOnline.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.util_8.1.14.v20131031.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.forms_3.6.100.v20140422-1825.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-sendopts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Glow Edge.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\CERTINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\concrt140.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\fxplugins.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7_RTL.wmv C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\ReportingServicesNativeClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.contrast-white_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-util-enumerations.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\blacklist C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightDemiItalic.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\zh-CN.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_winxp.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-spi-actions.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\trusted.libraries C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_COL.HXC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\CAMERA.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\msdaosp.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\LanguageModel\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.jarprocessor_1.0.300.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\net.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SkypeForBusinessVDI2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.runtime_3.10.0.v20140318-2214.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\java.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-cli_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTOCOLHANDLERINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\nl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\rmid.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\PUSH.WAV C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.SqlServer.Types.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views_3.7.0.v20140408-0703.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-swing-outline.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_pl.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTest-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\localedata.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jli.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\java.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-filesystem-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\kk.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TabIpsps.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado15.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RUI.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\hprof.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Organic.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial1-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fr-CA\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\libEGL.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\cursors.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\index.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-swing-tabcontrol.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\msix.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derby.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\lv.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jsound.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console_1.0.300.v20131113-1212.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Outlook2019R_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\lib\mailapi.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-core-kit.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\calendars.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector_1.0.200.v20131115-1210.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WacLangPack2019Eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\win32\bridge\AccessBridgeCallbacks.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\eclipse_1655.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-api.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Configuration\card_security_terms_dict.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\GFX.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\COPYRIGHT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\management\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\jsse.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipskor.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.natives.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sampler.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTrial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\jfr\default.jfc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\javax.servlet.jsp_2.2.0.v201112011158.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientOSub2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fr.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-spi-quicksearch.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\deploy\messages.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Constantia-Franklin Gothic Book.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\msotdintl.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000011\FA000000011 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\da-DK\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\LICENSE C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_KMS_ClientC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\java.security C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\jfr.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\uk-UA\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jstack.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Trial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\msadc\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome.exe.sig C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core-multiview.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-heapdump.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdXC2RVL_MAKC2R-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\br.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\AppvIsvSubsystems64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\nbexec.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sampler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\npt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTrial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.lv-lv.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-heapdump.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fi-FI\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\org.eclipse.rcp_root_4.4.0.v20141007-2301 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-uihandler.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-time-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\bci.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sw.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\sunmscapi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.nl-nl.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-utilities_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\cursors\win32_CopyDrop32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Century Gothic-Palatino Linotype.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\ms\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\core.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l2-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsfin.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Peacock.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\security\javaws.policy C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7-zip.chm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\IFDPINTL.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_basestyle.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo_small.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_ru.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.net.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\ext\sunpkcs11.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_COL.HXT C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\US_export_policy.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-uihandler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_MAKC2R-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-environment-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-core.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000008\FA000000008 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.batik.util_1.7.0.v201011041433.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsesp.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\chrome_100_percent.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\bg.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\JitV.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_f4\FA000000005 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\VC\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Soft Blue.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\blafdoc.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher_1.1.0.v20131211-1531.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\deployed\jdk16\windows-amd64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-loaders.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\locale\core_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClient.man C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\eu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\javafx_iio.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-file-l2-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.Excel.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\IPSEventLogMsg.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\tracedefinition130.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\nl-NL\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\SetupMetrics\20201028183016.pma C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Tw Cen MT.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-black_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\HWRCustomization\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-api_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-threaddump.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-api-search.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_de.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\classlist C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_COL.HXC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART5.BDR C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\SkypeServiceBypassR_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_COL.HXC C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\as90.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.SPClient.Interfaces.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems64.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-execution_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial3-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_Subscription-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EntityPickerIntl.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\7-Zip\Lang\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\mlib_image.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\uarrow.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\FPA_w1\WA104381125 C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\HandPrints.jpg C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help.webapp_3.6.300.v20140407-1855.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-core-kit.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-progress-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\meta-index C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.ReportDesign.Common.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\sl\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\db\bin\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\Sybase.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\cmm\LINEAR_RGB.pf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\loc\AppXManifestLoc.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Aspect.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProCO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.forms.nl_ja_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\schemagen.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-spi-quicksearch.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherVL_MAK-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProO365R_SubTrial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\msvcr120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Configuration\card_expiration_terms_dict.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eo.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fontconfig.bfc C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\BCSRuntimeRes.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\flavormap.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javafx_iio.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-localization-l1-2-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\db\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\offsyml.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\MANIFEST.XML C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-swing-tabcontrol.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG.HXS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-settings.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentVNextR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp6-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\casual.dotx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\InstallerMainShell.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_it.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\org-netbeans-core-windows_visualvm.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\tnameserv.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-math-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription1-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_winxp_blu.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-openide-awt.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jre1.8.0_66\bin\plugin2\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365EduCloudEDUR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Office.PowerPivot.ExcelAddIn.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-options-api.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\TITLE.XSL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemui.msi.16.en-us.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVPolicy.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-core-execution_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\java_crw_demo.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hu-HU\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\es-ES\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\images\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipshi.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProMSDNR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InkObj.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\org-openide-util-lookup.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-core-kit_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sa.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp5-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\trdtv2r41.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-heapwalker_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\System\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\msvcr120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.ssl_1.1.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\zh-TW\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadox.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-options-keymap.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Grace-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\msvcr120.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.Office.Tools.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-string-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\sk.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\orbd.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Smokey Glass.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_SubTest-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH.HXS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_f4\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.ui.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jar.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\images\cursors\invalid32x32.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusMSDNR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office15\pidgenx.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\ar-SA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Retrospect.thmx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipssrl.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\about.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONCHARTCOMMON.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.ja_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-api-caching.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\jp2launcher.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-keymap.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\mojo_core.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\startNetworkServer C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerEvaluators.exsd C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalPipcR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-stdio-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_Retail-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\toc.gif C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-convert-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_jpn.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\swiftshader\libGLESv2.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.RSA C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-modules_zh_CN.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\TextConv\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\sk-SK\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\MLASeventhEditionOfficeOnline.xsl C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\java.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-print.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MEDIA\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_heb.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Grunge Texture.eftx C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\_platform_specific\win_x64\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-explorer.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\README.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jstat.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.di.extensions_0.12.0.v20140417-2033.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\epl-v10.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-progress-ui.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.help_3.6.0.v20130326-1254.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jfxwebkit.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.lucene.analysis_3.5.0.v20120725-1805.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\rmid.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.ScriptDom.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jmap.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-utilities.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\java-rmi.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application-views.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-processthreads-l1-1-1.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Trial-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\POWERMAPCLASSIFICATION.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tipskins.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\pl-PL\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Dallas.OAuthClient.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\mip.exe.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\hi.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_partstyle.css C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_MAKC2R-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.nb-no.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msadcer.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\es-419.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.core_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winClassicHandle.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-timezone-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\th-TH\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessDemoR_BypassTrial365-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365BusinessR_Subscription-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Resources\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\DataStreamerLibrary.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf_3.4.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msado26.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\PROTTPLV.XLS C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\vi\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipschs.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\license.html C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine_2.3.0.v20140506-1720.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Consolas-Verdana.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\jaccess.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\javafx.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-core.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-xstate-l2-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientLangPack2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Trial-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\sqmapi.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\ktab.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.filetransfer_5.0.0.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hu-hu.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2launcher.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\ado\msadomd28.tlb C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Internet Explorer\en-US\hmmapi.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\mlib_image.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdVL_MAK-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\zh-CN\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\unpack200.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\lib\fonts\LucidaBrightItalic.ttf C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\setNetworkServerCP.bat C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-heapwalker.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_ca.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\META-INF\MANIFEST.MF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-attach.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_Trial2-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_KMS_Client-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Edm.NetFX35.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.id-id.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\awt.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_PrepidBypass-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\Client2019_eula.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\es.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.text.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\tipresx.dll.mui C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.properties C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\pt-BR\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_profile_large.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipsfra.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\include\jawt.h C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\System\msadc\msaddsr.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTest-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\AugLoop\bundle.js C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.nl_zh_4.4.0.v20140623020002.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate32.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\PRIVATE_ODBC32.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Google\Chrome\Application\86.0.4240.111\WidevineCdm\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Excel.MDXQueryGenerator.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-uihandler.xml_hidden C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\master_preferences C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_KMS_Client_AE-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioProXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\86.0.4240.111\Locales\fil.pak C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\ext\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-api.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_OEM_Perp-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\Library\Analysis\ANALYS32.XLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_hu.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\bin\zip.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-black_scale-180.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogo.scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\nb.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Stars.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\bin\javafx_font_t2k.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ecf.provider.filetransfer.httpclient4_1.0.800.v20140827-1444.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_ja.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jre1.8.0_66\release C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\DATATRANSFORMERWRAPPER.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\hu\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-black_scale-80.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.hi-in.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-api-progress.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail3-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.OData.Core.NetFX35.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\de.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Grace-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\he.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\modules\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\Configuration\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings_0.10.200.v20140424-2042.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository_1.2.100.v20131209-2144.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.ReportingServices.Diagnostics.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\BIPLAT.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\DBGHELP.DLL C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SETLANG_F_COL.HXK C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\Read_Me.txt C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteR_Retail-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-100.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\i640.hash C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-pl.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-execution.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.browser.jdp_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs.zh_CN_5.5.0.165303.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.css.sac_1.3.1.v200903091627.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-views.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail-ul-phn.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_OEM_Perp-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.contrast-white_scale-140.png C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\bin\jstatd.exe C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\artifacts.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\Hand Prints.htm C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Spatial.NetFX35.V7.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\sunjce_provider.jar C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Calibri Light-Constantia.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-string-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-text.xml C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\3715134609.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\a.exe

"C:\Users\Admin\AppData\Local\Temp\a.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /c start C:\Users\Admin\AppData\Local\Temp\29474.jpg

C:\Users\Admin\AppData\Local\Temp\10128.exe

C:\Users\Admin\AppData\Local\Temp\10128.exe

C:\20172306425313\winsvcs.exe

C:\20172306425313\winsvcs.exe

C:\Users\Admin\AppData\Local\Temp\3715134609.exe

C:\Users\Admin\AppData\Local\Temp\3715134609.exe

Network

Country Destination Domain Proto
N/A 52.109.12.18:443 tcp
N/A 8.8.8.8:53 trik.ws udp
N/A 217.8.117.10:8080 trik.ws tcp
N/A 217.8.117.10:8080 trik.ws tcp
N/A 217.8.117.10:8080 trik.ws tcp
N/A 8.8.8.8:53 304049943.ws udp
N/A 64.70.19.203:8080 304049943.ws tcp

Files

memory/1100-0-0x0000000000000000-mapping.dmp

memory/1888-1-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Temp\10128.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

C:\Users\Admin\AppData\Local\Temp\10128.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

memory/3916-4-0x0000000000000000-mapping.dmp

C:\20172306425313\winsvcs.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

C:\20172306425313\winsvcs.exe

MD5 1f8cef7b1f327e19ec561d1b80583d2d
SHA1 96795527c65711c13aef7f2cda3b5a0ff5779137
SHA256 c6ee0c5549619ebf81f7878da18a6e29ff315be7d0fb3d9b79b84717405c87f6
SHA512 2bdb59b8ca921b7def3547c622a4357398566c475ed1c77aad4fe91f1171ddee1b0d3524463ead12a10bba19fb5e23dcad3b00e948c8bde585d315906fd782e2

memory/4020-7-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Temp\3715134609.exe

MD5 7d52884b375ce8b6182f1c53f0f1c496
SHA1 6b70e90b0dada8d93c61caa678e76ce2abcbc76b
SHA256 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021
SHA512 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515

C:\Users\Admin\AppData\Local\Temp\3715134609.exe

MD5 7d52884b375ce8b6182f1c53f0f1c496
SHA1 6b70e90b0dada8d93c61caa678e76ce2abcbc76b
SHA256 9c48e8a5f83614f685249486a13a8a132660f37d11c5f55581414dbf02091021
SHA512 24350255bda3672cce0ff22221e5973cd69f5b8470eb642e9679c3c006716271af8f32a2d4ee5309949c746eb9cb15bba411052fd4935a2a2b436501c7b4a515

memory/4020-11-0x0000000004D30000-0x0000000004DF1000-memory.dmp

memory/4020-16-0x0000000004E30000-0x0000000004EFA000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\29474.jpg

MD5 4d23e02d17563f2cee703384cc846c8d
SHA1 0d76ac46acb86a861baafed1decbd30325c789e3
SHA256 c79765fd5e568441d33950403ebef264c0d6c948fb691eca90db4395dc98f911
SHA512 ff11309a7aa95616fe928fb76afdda8d7fccf23e14957f5cfbcf91a64587253bbdac6746a7d1f835d7784417fe77f9c77014e59d74cc16f08d3fe8ee64967753

memory/4020-24-0x0000000004E30000-0x0000000004EFA000-memory.dmp