Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'BrowserUpdateCheck' = '%LOCALAPPDATA%\<File name>.exe'
Malicious functions
Reads files which store third party applications passwords
- %HOMEPATH%\desktop\508softwareandos.doc
- %HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc
- %HOMEPATH%\desktop\toolbar.bmp
- %HOMEPATH%\desktop\tileimage.bmp
- %HOMEPATH%\desktop\split.avi
- %HOMEPATH%\desktop\pmd.cer
- %HOMEPATH%\desktop\ovp25012015.doc
- %HOMEPATH%\desktop\lisp_success.doc
- %HOMEPATH%\desktop\ituneshelpunavailable.htm
- %APPDATA%\thunderbird\profiles.ini
- %HOMEPATH%\desktop\issi2013_template_for_posters.docx
- %HOMEPATH%\desktop\fi51.doc
- %HOMEPATH%\desktop\dialmap.bmp
- %HOMEPATH%\desktop\delete.avi
- %HOMEPATH%\desktop\default.bmp
- %HOMEPATH%\desktop\dashborder_192.bmp
- %HOMEPATH%\desktop\contosoroot.cer
- %HOMEPATH%\desktop\archer.avi
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
- %HOMEPATH%\desktop\garden.htm
- %APPDATA%\mozilla\firefox\profiles.ini
Modifies file system
Creates the following files
- %LOCALAPPDATA%\<File name>.exe
- %ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\read me!.hta
- %ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\read me!.hta
- %ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\read me!.hta
- %ALLUSERSPROFILE%\oracle\java\javapath\read me!.hta
- %ALLUSERSPROFILE%\oracle\java\installcache_x64\read me!.hta
- %ALLUSERSPROFILE%\mozilla\updates\d78bf5dd33499ec2\read me!.hta
- %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\read me!.hta
- %ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\read me!.hta
- C:\recovery\4cc8e8a4-51d2-11ee-b826-9a90d4dcffb5\read me!.hta
- %ProgramFiles(x86)%\read me!.hta
- %ProgramFiles(x86)%\steam\read me!.hta
- %ProgramFiles(x86)%\steam\public\read me!.hta
- %ProgramFiles(x86)%\steam\logs\read me!.hta
- %ProgramFiles(x86)%\steam\bin\read me!.hta
- %ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\read me!.hta
- %ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\read me!.hta
- %ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\read me!.hta
- %ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\read me!.hta
- %ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\vcruntimeadditional_x86\read me!.hta
- %ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\vcruntimeminimum_amd64\read me!.hta
- %ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\read me!.hta
- %ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\vcruntimeadditional_amd64\read me!.hta
- %ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\read me!.hta
- %ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\read me!.hta
- %ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\read me!.hta
- %ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\read me!.hta
- %ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\read me!.hta
- %ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\vcruntimeadditional_amd64\read me!.hta
- %ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\vcruntimeminimum_x86\read me!.hta
- %ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\vcruntimeminimum_amd64\read me!.hta
- %ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\read me!.hta
- %ProgramFiles(x86)%\msbuild\read me!.hta
- %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\read me!.hta
- %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\1033\read me!.hta
- %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\versions\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\root\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\read me!.hta
- %ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\read me!.hta
- %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\read me!.hta
- %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\resources\1033\read me!.hta
- %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\read me!.hta
- %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\read me!.hta
- %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\privateassemblies\read me!.hta
- %ProgramFiles(x86)%\microsoft office\office14\read me!.hta
- %ProgramFiles(x86)%\microsoft office\office14\1033\read me!.hta
- %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\read me!.hta
- %ALLUSERSPROFILE%\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\read me!.hta
- C:\users\public\pictures\read me!.hta
- %HOMEPATH%\downloads\read me!.hta
- %HOMEPATH%\documents\read me!.hta
- %HOMEPATH%\desktop\read me!.hta
- %HOMEPATH%\contacts\read me!.hta
- %APPDATA%\thunderbird\read me!.hta
- %APPDATA%\thunderbird\profiles\hmz1jddi.default\read me!.hta
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\read me!.hta
- %HOMEPATH%\saved games\read me!.hta
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\read me!.hta
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\read me!.hta
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\crashes\read me!.hta
- %APPDATA%\thunderbird\crash reports\read me!.hta
- %APPDATA%\telegram desktop\read me!.hta
- %APPDATA%\mozilla\firefox\read me!.hta
- %HOMEPATH%\favorites\links\read me!.hta
- %HOMEPATH%\favorites\links for united states\read me!.hta
- %HOMEPATH%\favorites\microsoft websites\read me!.hta
- %HOMEPATH%\favorites\msn websites\read me!.hta
- %HOMEPATH%\favorites\windows live\read me!.hta
- %HOMEPATH%\favorites\read me!.hta
- %HOMEPATH%\links\read me!.hta
- %HOMEPATH%\music\read me!.hta
- %HOMEPATH%\pictures\read me!.hta
- %APPDATA%\thunderbird\profiles\chdgbv82.default-release\read me!.hta
- %HOMEPATH%\searches\read me!.hta
- %HOMEPATH%\videos\read me!.hta
- %HOMEPATH%\read me!.hta
- D:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\read me!.hta
- C:\users\read me!.hta
- D:\read me!.hta
- C:\users\public\5d8819ab1c07f60e7fd0d87c33c3a258c9295a70eaf7fd546af5eda7f4a51491
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\default\moz-extension+++5fc1ef9c-f7bf-452f-a7ef-92635f5362ce^usercontextid=4294967295\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\default\moz-extension+++5fc1ef9c-f7bf-452f-a7ef-92635f5362ce^usercontextid=4294967295\idb\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\read me!.hta
- %LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\cache2\entries\read me!.hta
- C:\users\public\read me!.hta
- C:\users\public\videos\read me!.hta
- C:\users\public\videos\sample videos\read me!.hta
- C:\users\public\recorded tv\read me!.hta
- C:\users\public\recorded tv\sample media\read me!.hta
- C:\users\public\pictures\sample pictures\read me!.hta
- %ALLUSERSPROFILE%\sun\java\java update\read me!.hta
- C:\users\public\music\read me!.hta
- C:\users\public\music\sample music\read me!.hta
- C:\users\public\libraries\read me!.hta
- C:\users\public\downloads\read me!.hta
- C:\users\public\documents\read me!.hta
- C:\users\public\desktop\read me!.hta
- %LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\offlinecache\read me!.hta
- %APPDATA%\mozilla\firefox\crash reports\read me!.hta
- %LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\startupcache\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\m15ucxjx.default\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\crashes\read me!.hta
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\bookmarkbackups\bookmarks-2024-04-01_11_w-7ab47btxtewdh4a2yehg==.jsonlz4
- %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\bookmarkbackups\read me!.hta
- C:\users\default\read me!.hta
- %TEMP%\read me!.hta
- %LOCALAPPDATA%low\sun\java\jre1.8.0_45_x64\read me!.hta
- %LOCALAPPDATA%low\sun\java\deployment\read me!.hta
- %LOCALAPPDATA%low\oracle\java\au\read me!.hta
- %LOCALAPPDATA%\read me!.hta
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\startupcache\read me!.hta
- %LOCALAPPDATA%\thunderbird\profiles\chdgbv82.default-release\cache2\entries\read me!.hta
- %TEMP%\opera installer\read me!.hta
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\read me!.hta
Moves the following files
- from %APPDATA%\thunderbird\installs.ini to %APPDATA%\thunderbird\installs.ini.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msolui100.dll to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msolui100.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msolap100.dll to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msolap100.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msmgdsrv.dll to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msmgdsrv.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msmdlocal.dll to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\msmdlocal.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\1033\vviewres.dll to %ProgramFiles(x86)%\microsoft office\office14\1033\vviewres.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\1033\vbaows10.chm to %ProgramFiles(x86)%\microsoft office\office14\1033\vbaows10.chm.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\1033\stsupld.intl.dll to %ProgramFiles(x86)%\microsoft office\office14\1033\stsupld.intl.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\as90.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\as90.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\as80.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\as80.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\1033\mapishellr.dll to %ProgramFiles(x86)%\microsoft office\office14\1033\mapishellr.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\1033\bhointl.dll to %ProgramFiles(x86)%\microsoft office\office14\1033\bhointl.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\vviewer.dll to %ProgramFiles(x86)%\microsoft office\office14\vviewer.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\vviewdwg.dll to %ProgramFiles(x86)%\microsoft office\office14\vviewdwg.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\stsupld.dll to %ProgramFiles(x86)%\microsoft office\office14\stsupld.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\stscopy.dll to %ProgramFiles(x86)%\microsoft office\office14\stscopy.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\ppslax.dll to %ProgramFiles(x86)%\microsoft office\office14\ppslax.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\owssupp.dll to %ProgramFiles(x86)%\microsoft office\office14\owssupp.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\onlntcomlib.dll to %ProgramFiles(x86)%\microsoft office\office14\onlntcomlib.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\1033\stsucres.dll to %ProgramFiles(x86)%\microsoft office\office14\1033\stsucres.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settings.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settings.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\informix.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\informix.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\enutxt.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\enutxt.pdf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\readme.htm to %ProgramFiles(x86)%\adobe\acrobat reader dc\readme.htm.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\onenotesyncpc.dll to %ProgramFiles(x86)%\microsoft office\office14\onenotesyncpc.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\1033\ocltint.dll to %ProgramFiles(x86)%\microsoft office\office14\1033\ocltint.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\onbttnielinkednotes.dll to %ProgramFiles(x86)%\microsoft office\office14\onbttnielinkednotes.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\onbttnie.dll to %ProgramFiles(x86)%\microsoft office\office14\onbttnie.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\olkfstub.dll to %ProgramFiles(x86)%\microsoft office\office14\olkfstub.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfig.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfig.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\interface.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\interface.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\form.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\form.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\emptydatabase.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\emptydatabase.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\dataset.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\dataset.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\codefile.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\codefile.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\class.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\class.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfointernal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfointernal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfo.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfo.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfiginternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfiginternal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\usercontrol.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\usercontrol.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\text.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\text.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\settingsinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\settingsinternal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\module.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\module.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\form.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\form.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl to %ProgramFiles(x86)%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\textfile.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\textfile.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\oisctrl.dll to %ProgramFiles(x86)%\microsoft office\office14\oisctrl.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\npspwrap.dll to %ProgramFiles(x86)%\microsoft office\office14\npspwrap.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\npauthz.dll to %ProgramFiles(x86)%\microsoft office\office14\npauthz.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\nameext.dll to %ProgramFiles(x86)%\microsoft office\office14\nameext.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\namecontrolproxy.dll to %ProgramFiles(x86)%\microsoft office\office14\namecontrolproxy.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\name.dll to %ProgramFiles(x86)%\microsoft office\office14\name.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\msohtmed.exe to %ProgramFiles(x86)%\microsoft office\office14\msohtmed.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\inlaunch.dll to %ProgramFiles(x86)%\microsoft office\office14\inlaunch.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\ieawsdc.dll to %ProgramFiles(x86)%\microsoft office\office14\ieawsdc.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\bcslaunch.dll to %ProgramFiles(x86)%\microsoft office\office14\bcslaunch.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft office\office14\authzax.dll to %ProgramFiles(x86)%\microsoft office\office14\authzax.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\privateassemblies\microsoft.visualstudio.tools.applications.project.dll to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\privateassemblies\microsoft.visualstudio.tools.applications.project.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\system.addin.dll to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\system.addin.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.designtime.dll to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.designtime.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.comrpcchannel.dll to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.comrpcchannel.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.addinmanager.dll to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.addinmanager.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.adapter.dll to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.adapter.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\xmlfile.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\xmlfile.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\visualizer.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\visualizer.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\usercontrol.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\usercontrol.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settingsinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settingsinternal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\a3dutils.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\a3dutils.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\rtc.der to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\rtc.der.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\rt3d.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\rt3d.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\reader_sl.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\reader_sl.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pmd.cer to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pmd.cer.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pe.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pe.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfprevhndlr.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfprevhndlr.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\onix32.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\onix32.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\logtransport2.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\logtransport2.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\sqlite.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\sqlite.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\sccore.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\sccore.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\icudt40.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\icudt40.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\icucnv40.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\icucnv40.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\extendscript.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\extendscript.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\eula.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\eula.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.sig to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.sig.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cooltype.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cooltype.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_ecdrbg.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_ecdrbg.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_ecc.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_ecc.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\logsession.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\logsession.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\viewerps.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\viewerps.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\root\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\root\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ui-strings.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\versions\framework-dev.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\versions\framework-dev.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\rna-main.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\rna-main.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\desktop.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\desktop.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\config.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\config.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\plugins.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\plugins.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\init.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\init.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\index.html to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\index.html.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\base_uris.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\base_uris.js.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_base_non_fips.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_base_non_fips.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\jp2klib.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\jp2klib.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_base.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_base.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_asym.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_asym.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\bibutils.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\bibutils.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-it.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-it.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\sy______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\sy______.pfm.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zy______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zy______.pfb.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zx______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zx______.pfb.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\sy______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\sy______.pfb.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-regular.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-regular.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-it.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-it.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-boldit.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-boldit.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-bold.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-regular.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-regular.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-boldit.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-boldit.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zy______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zy______.pfm.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-bold.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-oblique.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-oblique.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-boldoblique.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-boldoblique.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-bold.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\saslprepprofile_norm_bidi.spp to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\saslprepprofile_norm_bidi.spp.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\icudt26l.dat to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\icudt26l.dat.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrobroker.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrobroker.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zx______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zx______.pfm.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\bib.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\bib.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\axsle.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\axsle.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\axe8sharedexpat.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\axe8sharedexpat.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\arh.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\arh.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ahclient.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ahclient.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agmgpuoptin.ini to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agmgpuoptin.ini.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agm.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agm.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobexmp.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobexmp.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adoberfp.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adoberfp.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobelinguistic.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobelinguistic.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobecollabsync.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobecollabsync.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobe.reader.dependencies.manifest to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobe.reader.dependencies.manifest.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adelrcp.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adelrcp.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrotextextractor.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrotextextractor.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrosup64.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrosup64.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32res.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32res.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32info.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32info.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrofx32.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrofx32.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ace.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ace.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\wow_helper.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\wow_helper.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\emptydatabase.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\emptydatabase.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\2a211dea-1f81-457a-9f7c-a174126ff0dd to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\2a211dea-1f81-457a-9f7c-a174126ff0dd.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\upgrade.jsonlz4-20200708170202 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\upgrade.jsonlz4-20200708170202.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\recovery.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\recovery.jsonlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\recovery.baklz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\recovery.baklz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\previous.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessionstore-backups\previous.jsonlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\default\moz-extension+++5fc1ef9c-f7bf-452f-a7ef-92635f5362ce^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql... to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\default\moz-extension+++5fc1ef9c-f7bf-452f-a7ef-92635f5362ce^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql...
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\default\moz-extension+++5fc1ef9c-f7bf-452f-a7ef-92635f5362ce^usercontextid=4294967295\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\default\moz-extension+++5fc1ef9c-f7bf-452f-a7ef-92635f5362ce^usercontextid=4294967295\.metadata-v2.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\xulstore.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\xulstore.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\user.js to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\user.js.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\9cd37e15-817f-4044-81be-e43af1dfc595 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\9cd37e15-817f-4044-81be-e43af1dfc595.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\71d7d59d-5451-4f15-bb9e-420e88a3061f to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\71d7d59d-5451-4f15-bb9e-420e88a3061f.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessioncheckpoints.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sessioncheckpoints.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\search.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\search.json.mozlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\prefs.js to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\prefs.js.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\pluginreg.dat to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\pluginreg.dat.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\pkcs11.txt to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\pkcs11.txt.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\handlers.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\handlers.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\extensions.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\extensions.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\extension-preferences.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\extension-preferences.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\containers.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\containers.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\times.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\times.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\prefs.js to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\prefs.js.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\dc35f7c9-5b80-4042-a301-e84d8619b27e to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\saved-telemetry-pings\dc35f7c9-5b80-4042-a301-e84d8619b27e.[cyber@asia.com]
- from %TEMP%\dd_vcredistui12db.txt to %TEMP%\dd_vcredistui12db.txt.[cyber@asia.com]
- from %TEMP%\dd_vcredistmsi12db.txt to %TEMP%\dd_vcredistmsi12db.txt.[cyber@asia.com]
- from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt.[cyber@asia.com]
- from %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt.[cyber@asia.com]
- from %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt to %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.[cyber@asia.com]
- from %TEMP%\chrome_installer.log to %TEMP%\chrome_installer.log.[cyber@asia.com]
- from %TEMP%\aspnetsetup_00001.log to %TEMP%\aspnetsetup_00001.log.[cyber@asia.com]
- from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log.[cyber@asia.com]
- from %TEMP%\armui.ini to %TEMP%\armui.ini.[cyber@asia.com]
- from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log.[cyber@asia.com]
- from %TEMP%\adobearm.log to %TEMP%\adobearm.log.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\crash reports\installtime20200708170202 to %APPDATA%\mozilla\firefox\crash reports\installtime20200708170202.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\m15ucxjx.default\user.js to %APPDATA%\mozilla\firefox\profiles\m15ucxjx.default\user.js.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\m15ucxjx.default\times.json to %APPDATA%\mozilla\firefox\profiles\m15ucxjx.default\times.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\bookmarkbackups\bookmarks-2024-04-01_11_w-7ab47btxtewdh4a2yehg==.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\bookmarkbackups\bookmarks-2024-04-01_11_w-7ab47btxtewdh4a2yehg==.jsonlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\crashes\store.json.mozlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\crashes\store.json.mozlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729070.71d7d59d-5451-4f15-bb9e-420e88a3061f.first-shutdown.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729070.71d7d59d-5451-4f15-bb9e-420e88a3061f.first-shutdown.jsonlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729067.9cd37e15-817f-4044-81be-e43af1dfc595.main.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729067.9cd37e15-817f-4044-81be-e43af1dfc595.main.jsonlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729047.dc35f7c9-5b80-4042-a301-e84d8619b27e.event.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729047.dc35f7c9-5b80-4042-a301-e84d8619b27e.event.jsonlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729016.2a211dea-1f81-457a-9f7c-a174126ff0dd.new-profile.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\archived\2023-09\1694565729016.2a211dea-1f81-457a-9f7c-a174126ff0dd.new-profile.jsonlz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\state.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\state.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\compatibility.ini to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\compatibility.ini.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\shield-preference-experiments.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\shield-preference-experiments.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\broadcast-listeners.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\broadcast-listeners.json.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\addonstartup.json.lz4 to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\addonstartup.json.lz4.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\addons.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\addons.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\enigmail.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\enigmail.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\openpgp.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\openpgp.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\mailviews.dat to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\mailviews.dat.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\key4.db to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\key4.db.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\history.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\history.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\global-messages-db.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\formhistory.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\formhistory.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\favicons.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\favicons.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extensions.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extensions.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extension-preferences.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\extension-preferences.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\directorytree.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\directorytree.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\pkcs11.txt to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\pkcs11.txt.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\cookies.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\cookies.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\compatibility.ini to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\compatibility.ini.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\cert9.db to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\cert9.db.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\blist.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\blist.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addonstartup.json.lz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addonstartup.json.lz4.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addons.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\addons.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\abook.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\abook.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\hmz1jddi.default\times.json to %APPDATA%\thunderbird\profiles\hmz1jddi.default\times.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles.ini to %APPDATA%\thunderbird\profiles.ini.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171641.log to %TEMP%\dd_vcredist_amd64_20230912171641.log.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\session-state.json to %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\datareporting\session-state.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\places.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\places.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\sessioncheckpoints.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\sessioncheckpoints.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\permissions.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\permissions.sqlite.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\profiles.ini to %APPDATA%\mozilla\firefox\profiles.ini.[cyber@asia.com]
- from %APPDATA%\mozilla\firefox\installs.ini to %APPDATA%\mozilla\firefox\installs.ini.[cyber@asia.com]
- from %APPDATA%\telegram desktop\updater.exe to %APPDATA%\telegram desktop\updater.exe.[cyber@asia.com]
- from %APPDATA%\telegram desktop\unins000.exe to %APPDATA%\telegram desktop\unins000.exe.[cyber@asia.com]
- from %APPDATA%\telegram desktop\unins000.dat to %APPDATA%\telegram desktop\unins000.dat.[cyber@asia.com]
- from %APPDATA%\telegram desktop\telegram.exe to %APPDATA%\telegram desktop\telegram.exe.[cyber@asia.com]
- from %APPDATA%\thunderbird\crash reports\installtime20210406220621 to %APPDATA%\thunderbird\crash reports\installtime20210406220621.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\crashes\store.json.mozlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\crashes\store.json.mozlz4.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729926.199a0618-6d48-4205-858d-6b9a8ba9e913.first-shutdown.jsonlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729926.199a0618-6d48-4205-858d-6b9a8ba9e913.first-shutdown.jsonlz4.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729925.d8154144-ac52-40e8-b685-b640783b2c0d.main.jsonlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729925.d8154144-ac52-40e8-b685-b640783b2c0d.main.jsonlz4.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729880.22a456d0-5d02-445b-9603-4fe4b9e5c45c.new-profile.jsonlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\archived\2023-09\1694565729880.22a456d0-5d02-445b-9603-4fe4b9e5c45c.new-profile.jsonlz4.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\state.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\state.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\session-state.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\datareporting\session-state.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\d8154144-ac52-40e8-b685-b640783b2c0d to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\d8154144-ac52-40e8-b685-b640783b2c0d.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\22a456d0-5d02-445b-9603-4fe4b9e5c45c to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\22a456d0-5d02-445b-9603-4fe4b9e5c45c.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\199a0618-6d48-4205-858d-6b9a8ba9e913 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\saved-telemetry-pings\199a0618-6d48-4205-858d-6b9a8ba9e913.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\xulstore.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\xulstore.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\webappsstore.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\times.json to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\times.json.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage.sqlite to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage.sqlite.[cyber@asia.com]
- from %APPDATA%\thunderbird\profiles\chdgbv82.default-release\search.json.mozlz4 to %APPDATA%\thunderbird\profiles\chdgbv82.default-release\search.json.mozlz4.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dataset.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dataset.zip.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171735.log to %TEMP%\dd_vcredist_amd64_20230912171735.log.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_latam.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_latam.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_bulgarian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_bulgarian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\uninstall.exe to %ProgramFiles(x86)%\steam\uninstall.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\steam.exe to %ProgramFiles(x86)%\steam\steam.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\steam.cfg to %ProgramFiles(x86)%\steam\steam.cfg.[cyber@asia.com]
- from %ProgramFiles(x86)%\desktop.ini to %ProgramFiles(x86)%\desktop.ini.[cyber@asia.com]
- from %TEMP%\wmsetup.log to %TEMP%\wmsetup.log.[cyber@asia.com]
- from %TEMP%\wallpaper.bmp to %TEMP%\wallpaper.bmp.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\class.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\class.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\assemblyinfointernal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\assemblyinfointernal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\appconfigurationinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\appconfigurationinternal.zip.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\1033\vstaprojectui.dll to %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\1033\vstaprojectui.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\1033\vstaclientpkgui.dll to %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\1033\vstaclientpkgui.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\vstaproject.dll to %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\vstaproject.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\vstaclientpkg.dll to %ProgramFiles(x86)%\microsoft visual studio 8\vsta\bin\vstaclientpkg.dll.[cyber@asia.com]
- from %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets to %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\bin\steamservice.exe to %ProgramFiles(x86)%\steam\bin\steamservice.exe.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt to %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_vietnamese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_vietnamese.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt.[cyber@asia.com]
- from %TEMP%\user.bmp to %TEMP%\user.bmp.[cyber@asia.com]
- from %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt to %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt.[cyber@asia.com]
- from %TEMP%\setupexe(202309121734336dc).log to %TEMP%\setupexe(202309121734336dc).log.[cyber@asia.com]
- from %TEMP%\rgia609.tmp-tmp to %TEMP%\rgia609.tmp-tmp.[cyber@asia.com]
- from %TEMP%\rgia609.tmp to %TEMP%\rgia609.tmp.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171936.log to %TEMP%\dd_vcredist_x86_20230912171936.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171759.log to %TEMP%\dd_vcredist_x86_20230912171759.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171710.log to %TEMP%\dd_vcredist_x86_20230912171710.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172315.log to %TEMP%\dd_vcredist_amd64_20230912172315.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172247.log to %TEMP%\dd_vcredist_amd64_20230912172247.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172134.log to %TEMP%\dd_vcredist_amd64_20230912172134.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912172034.log to %TEMP%\dd_vcredist_amd64_20230912172034.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171824.log to %TEMP%\dd_vcredist_amd64_20230912171824.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log.[cyber@asia.com]
- from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog.zip.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172157.log to %TEMP%\dd_vcredist_x86_20230912172157.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172224.log to %TEMP%\dd_vcredist_x86_20230912172224.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log.[cyber@asia.com]
- from %TEMP%\ose00000.exe to %TEMP%\ose00000.exe.[cyber@asia.com]
- from %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997.html to %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997.html.[cyber@asia.com]
- from %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt.[cyber@asia.com]
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793.html to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793.html.[cyber@asia.com]
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt.[cyber@asia.com]
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215.html to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215.html.[cyber@asia.com]
- from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt.[cyber@asia.com]
- from %TEMP%\microsoft .net framework 4.8 setup_20230912_173103134.html to %TEMP%\microsoft .net framework 4.8 setup_20230912_173103134.html.[cyber@asia.com]
- from %TEMP%\microsoft .net framework 4 setup_20230912_172639823.html to %TEMP%\microsoft .net framework 4 setup_20230912_172639823.html.[cyber@asia.com]
- from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt.[cyber@asia.com]
- from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt.[cyber@asia.com]
- from %TEMP%\jusched.log to %TEMP%\jusched.log.[cyber@asia.com]
- from %TEMP%\jawshtml.html to %TEMP%\jawshtml.html.[cyber@asia.com]
- from %TEMP%\javadeployreg.log to %TEMP%\javadeployreg.log.[cyber@asia.com]
- from %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt to %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt.[cyber@asia.com]
- from %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt to %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172350.log to %TEMP%\dd_vcredist_x86_20230912172350.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172322.log to %TEMP%\dd_vcredist_x86_20230912172322.log.[cyber@asia.com]
- from %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log.[cyber@asia.com]
- from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js.[cyber@asia.com]
Modifies the following files
- D:\install.log
- %HOMEPATH%\favorites\microsoft websites\ie site on microsoft.com.url
- %HOMEPATH%\favorites\microsoft websites\ie add-on site.url
- %HOMEPATH%\favorites\msn websites\msnbc news.url
- %HOMEPATH%\favorites\msn websites\msn.url
- %HOMEPATH%\favorites\msn websites\msn sports.url
- %HOMEPATH%\favorites\msn websites\msn money.url
- %HOMEPATH%\favorites\msn websites\msn entertainment.url
- %HOMEPATH%\favorites\msn websites\msn autos.url
- %HOMEPATH%\favorites\windows live\windows live spaces.url
- %HOMEPATH%\favorites\windows live\windows live mail.url
- %HOMEPATH%\favorites\windows live\windows live gallery.url
- %HOMEPATH%\favorites\windows live\get windows live.url
- %HOMEPATH%\favorites\desktop.ini
- %HOMEPATH%\links\recentplaces.lnk
- %HOMEPATH%\links\downloads.lnk
- %HOMEPATH%\links\desktop.lnk
- %HOMEPATH%\links\desktop.ini
- %HOMEPATH%\music\desktop.ini
- %HOMEPATH%\pictures\desktop.ini
- %HOMEPATH%\saved games\desktop.ini
- %HOMEPATH%\searches\indexed locations.search-ms
- %HOMEPATH%\searches\everywhere.search-ms
- %HOMEPATH%\searches\desktop.ini
- %HOMEPATH%\videos\desktop.ini
- D:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\desktop.ini
- <Drive name for removable media>:\split.avi
- C:\users\desktop.ini
- %HOMEPATH%\favorites\microsoft websites\microsoft at home.url
- %HOMEPATH%\favorites\microsoft websites\microsoft at work.url
Modifies multiple files.
Modifies user data files (Trojan.Encoder).
