MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccessMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccessMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccessMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccessMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0015-0412-0000-0000000FF1CE}-C\AccLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0016-0412-0000-0000000FF1CE}-C\ExcelMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PowerPointMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PowerPointMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PowerPointMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PowerPointMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PptLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PptLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PptLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0018-0412-0000-0000000FF1CE}-C\PptLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PublisherMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PublisherMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PublisherMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PublisherMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PubLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PubLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PubLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0019-0412-0000-0000000FF1CE}-C\PubLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlkLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlkLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlkLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlkLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlookMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlookMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlookMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-001A-0412-0000-0000000FF1CE}-C\OutlookMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-001B-0412-0000-0000000FF1CE}-C\WordMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.en\Proof.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.en\Proof.cab
newfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.en\Proof.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.en\Proof.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME32.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME32.cab
newfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME32.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME32.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME64.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME64.cab
newfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME64.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\IME64.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\Proof.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\Proof.cab
newfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\Proof.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-002C-0412-0000-0000000FF1CE}-C\Proof.ko\Proof.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterpriseWW.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterpriseWW.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterpriseWW.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterpriseWW.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterWW.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterWW.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterWW.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\EnterWW.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\osetup.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\osetup.dll
newfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\osetup.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\osetup.dll
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\OWOW64WW.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\OWOW64WW.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\OWOW64WW.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-C\OWOW64WW.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfoPathMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfoPathMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfoPathMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0044-0412-0000-0000000FF1CE}-C\InfoPathMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-006E-0412-0000-0000000FF1CE}-C\OfficeMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OneNoteMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OneNoteMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OneNoteMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OneNoteMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OnoteLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OnoteLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OnoteLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-00A1-0412-0000-0000000FF1CE}-C\OnoteLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Groove.en-us\GrooveMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeLR.cab
newfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeLR.cab.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeLR.cab
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeMUI.msi
newfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeMUI.msi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\MSOCache\All Users\{90120000-0114-0412-0000-0000000FF1CE}-C\Office.en-us\OfficeMUI.msi
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\7-Zip\7z.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\7-Zip\7z.dll
newfilepath:
C:\Program Files\7-Zip\7z.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\7-Zip\7z.dll
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\mraut.dll
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\mshwkorr.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\mshwkorr.dll
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\mshwkorr.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\mshwkorr.dll
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
newfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Java\jre7\bin\jfxwebkit.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Java\jre7\bin\jfxwebkit.dll
newfilepath:
C:\Program Files\Java\jre7\bin\jfxwebkit.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Java\jre7\bin\jfxwebkit.dll
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt
newfilepath:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt
newfilepath:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt
|
|
0 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Java\jre7\bin\server\classes.jsa.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Java\jre7\bin\server\classes.jsa
newfilepath:
C:\Program Files\Java\jre7\bin\server\classes.jsa.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Java\jre7\bin\server\classes.jsa
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Java\jre7\bin\server\jvm.dll.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Java\jre7\bin\server\jvm.dll
newfilepath:
C:\Program Files\Java\jre7\bin\server\jvm.dll.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Java\jre7\bin\server\jvm.dll
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Java\jre7\lib\charsets.jar.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Java\jre7\lib\charsets.jar
newfilepath:
C:\Program Files\Java\jre7\lib\charsets.jar.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Java\jre7\lib\charsets.jar
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files\Java\jre7\lib\deploy.jar.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files\Java\jre7\lib\deploy.jar
newfilepath:
C:\Program Files\Java\jre7\lib\deploy.jar.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files\Java\jre7\lib\deploy.jar
|
1
|
1 |
0
|
MoveFileWithProgressW
|
newfilepath_r:
C:\Program Files (x86)\Common Files\microsoft shared\MODI\12.0\KRPRINT.DAT.id-7C6024AD.[coronavirus@qq.com].ncov
flags:
2
oldfilepath_r:
C:\Program Files (x86)\Common Files\microsoft shared\MODI\12.0\KRPRINT.DAT
newfilepath:
C:\Program Files (x86)\Common Files\microsoft shared\MODI\12.0\KRPRINT.DAT.id-7C6024AD.[coronavirus@qq.com].ncov
oldfilepath:
C:\Program Files (x86)\Common Files\microsoft shared\MODI\12.0\KRPRINT.DAT
|
1
|
1 |
0
|