Trojan.Encoder.38381

Technical Information

Malicious functions

To complicate detection of its presence in the operating system,

deletes volume shadow copies.

Creates and executes the following

'%TEMP%\mssps.2aa'
'%TEMP%\mssps.1aa'

Modifies settings of Windows Internet Explorer

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1400' = '00000003'
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1C00' = '00000000'

Modifies file system

Creates the following files

%TEMP%\mssps.2aa
%TEMP%\mssps.1aa
<SYSTEM32>\ds.bat
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\c4d236f3dac177c9f644120be49cd551_d4602615-9d50-4880-be41-678935e93eaa
%HOMEPATH%\documents\Г—ГІo Г¤eГ«aГІГј Г¤Г«Гџ ГўГ®Г§ГўГ°Г ГІГ ГґaГ©Г«ob.txt

Deletes the following files

%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1238866942-1249195528-555854008-1000\c4d236f3dac177c9f644120be49cd551_d4602615-9d50-4880-be41-678935e93eaa

Moves the following system files

from %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.common.targets to %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.common_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1038\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1038\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1037\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1037\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1036\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1036\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1035\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1035\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1033\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1033\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1032\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1032\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1031\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1031\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1030\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1030\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1053\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1053\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1029\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1029\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1025\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1025\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\watermark.bmp to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\watermark_su57ormxs32h.bmp
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\splashscreen.bmp to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\splashscreen_su57ormxs32h.bmp
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\header.bmp to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\header_su57ormxs32h.bmp
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\3082\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\3082\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\3076\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\3076\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\2070\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\2070\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\2052\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\2052\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1028\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1028\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1055\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1055\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1040\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1040\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\2070\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\2070\eula_su57ormxs32h.rtf
from %WINDIR%\prefetch\agrobust.db to %WINDIR%\prefetch\agrobust_su57ormxs32h.db
from %WINDIR%\prefetch\aggluad_s-1-5-21-1238866942-1249195528-555854008-1000.db to %WINDIR%\prefetch\aggluad_s-1-5-21-1238866942-1249195528-555854008-1000_su57ormxs32h.db
from %WINDIR%\prefetch\aggluad_p_s-1-5-21-1238866942-1249195528-555854008-1000.db to %WINDIR%\prefetch\aggluad_p_s-1-5-21-1238866942-1249195528-555854008-1000_su57ormxs32h.db
from %WINDIR%\prefetch\agglglobalhistory.db to %WINDIR%\prefetch\agglglobalhistory_su57ormxs32h.db
from %WINDIR%\prefetch\agglfgapphistory.db to %WINDIR%\prefetch\agglfgapphistory_su57ormxs32h.db
from %WINDIR%\prefetch\agglfaulthistory.db to %WINDIR%\prefetch\agglfaulthistory_su57ormxs32h.db
from %WINDIR%\prefetch\agapplaunch.db to %WINDIR%\prefetch\agapplaunch_su57ormxs32h.db
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\3082\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\3082\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1042\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1042\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1041\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1041\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\2052\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\2052\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1055\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1055\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1053\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1053\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1049\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1049\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1046\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1046\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1045\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1045\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1044\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1044\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1043\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\1043\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\3076\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\3076\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1049\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1049\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1046\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1046\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1045\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1045\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.visualbasic.targets to %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.visualbasic_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.netframework.targets to %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.netframework_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.data.entity.targets to %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.data.entity_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.csharp.targets to %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.csharp_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.common.targets to %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.common_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\topgradrepeat.jpg to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\topgradrepeat_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\darkblue_grad.jpg to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\darkblue_grad_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.xaml.targets to %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.xaml_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\aspdotnet_logo.jpg to %WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\aspdotnet_logo_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\darkblue_grad.jpg to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\darkblue_grad_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\aspdotnet_logo.jpg to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\aspdotnet_logo_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.xaml.targets to %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.xaml_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.winfx.targets to %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.winfx_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.visualbasic.targets to %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.visualbasic_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.netframework.targets to %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.netframework_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.data.entity.targets to %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.data.entity_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.csharp.targets to %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.csharp_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\topgradrepeat.jpg to %WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\topgradrepeat_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\aspdotnet_logo.jpg to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\aspdotnet_logo_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.winfx.targets to %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.winfx_su57ormxs32h.targets
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\darkblue_grad.jpg to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\darkblue_grad_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1044\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1044\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1033\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1033\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1043\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1043\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1042\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1042\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1041\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1041\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1040\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1040\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1038\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1038\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1037\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1037\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1036\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1036\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1035\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1035\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1032\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1032\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\topgradrepeat.jpg to %WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\topgradrepeat_su57ormxs32h.jpg
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1031\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1031\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1030\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1030\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1029\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1029\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1028\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1028\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1025\eula.rtf to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\1025\eula_su57ormxs32h.rtf
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\watermark.bmp to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\watermark_su57ormxs32h.bmp
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\splashscreen.bmp to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\splashscreen_su57ormxs32h.bmp
from %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\header.bmp to %WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\header_su57ormxs32h.bmp
from <SYSTEM32>\license.rtf to <SYSTEM32>\license_su57ormxs32h.rtf
from %WINDIR%\syswow64\license.rtf to %WINDIR%\syswow64\license_su57ormxs32h.rtf

Moves the following files

from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext_su57ormxs32h.zip
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\sample-thumb.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\sample-thumb_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\home\images\new_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\file_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\file_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\illustrations_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-computer\images\new_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\illustrations_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\faf_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster2x.jpg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster2x_su57ormxs32h.jpg
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster.jpg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster_su57ormxs32h.jpg
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-files\images\new_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-57x57-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-57x57-precomposed_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\example_icons2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_bow_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\ccloud_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\core_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\illustrations_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\large_trefoil_2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\logo_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\logo_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\selection-actions2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\selection-actions2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_retina_thumb.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\aic_file_icons_retina_thumb_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_bow_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_hicontrast_wob_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_highcontrast.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_highcontrast_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_bow_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\new_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\illustrations_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_fw.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\core_icons_fw_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\adobe_sign_tag_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\adobe_sign_tag_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_highcontrast_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_wob_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_bow.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons_hicontrast_bow_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\aic_file_icons_retina_thumb_highcontrast_wob_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_wob.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\core_icons__retina_hicontrast_wob_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-72x72-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-72x72-precomposed_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen_su57ormxs32h.zip
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal_su57ormxs32h.zip
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent_su57ormxs32h.zip
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform_su57ormxs32h.zip
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer_su57ormxs32h.zip
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100_contrast-white_su57ormxs32h.png
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog_su57ormxs32h.zip
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource_su57ormxs32h.zip
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent_su57ormxs32h.zip
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox_su57ormxs32h.zip
from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\enutxt.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\enutxt_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x_su57ormxs32h.png
from %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal.zip to %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal_su57ormxs32h.zip
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\statictext.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\statictext_su57ormxs32h.jpg
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140_su57ormxs32h.png
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\key4.db to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\key4_su57ormxs32h.db
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cert9.db to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\cert9_su57ormxs32h.db
from %APPDATA%\microsoft\windows\themes\transcodedwallpaper.jpg to %APPDATA%\microsoft\windows\themes\transcodedwallpaper_su57ormxs32h.jpg
from %TEMP%\wallpaper.bmp to %TEMP%\wallpaper_su57ormxs32h.bmp
from %TEMP%\user.bmp to %TEMP%\user_su57ormxs32h.bmp
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180_contrast-white.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180_contrast-white_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-100.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-100_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80_contrast-white_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180_contrast-white_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140_contrast-white.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140_contrast-white_su57ormxs32h.png
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140_contrast-white_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\adobe-old-logo.jpg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\adobe-old-logo_su57ormxs32h.jpg
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\new_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\new_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adc_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adc_logo_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\logo_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\logo_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\illustrations_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons_retina.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons_retina_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\core_icons_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\fake_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\email\dummy\fake_logo_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-144x144-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-144x144-precomposed_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-114x114-precomposed.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\apple-touch-icon-114x114-precomposed_su57ormxs32h.png
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adc_logo.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adc_logo_su57ormxs32h.png
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\stopiconmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimages256colors.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\taskbariconimages256colors_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\tipsimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtooliconimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimages16x16.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimages16x16_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimagesmask16x16.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\webtoolimagesmask16x16_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\wssfilestooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendartooliconimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendarviewbuttonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\calendarviewbuttonimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_auto.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_auto_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_automask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_automask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthigh.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthigh_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_offmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_offmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_off.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_off_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_mediummask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_mediummask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_medium.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_medium_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_highmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_highmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\sketchiconimages.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\sketchiconimages_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoff.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoff_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehighmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehighmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehigh.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_filehigh_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlowmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contactlow_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthighmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_contacthighmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoffmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_fileoffmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24imagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_high.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\alertimage_high_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16imagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\calendartooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimages.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimages_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\chessiconimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\createspaceimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\datalisticonimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\dataviewiconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\discussiontooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimage.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\form_statusimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationicon.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationicon_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\informationiconmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logindialogbackground.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logindialogbackground_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24images_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24imagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\logintool24x24imagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared16x16images_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\questioniconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\questioniconmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\questionicon.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\questionicon_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\picturestooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outofsynciconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24images.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\shared24x24images_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagesmall.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsincomingimagesmall_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmaskrtl.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmaskrtl_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierwindowmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackgroundrtl.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackgroundrtl_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackground.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\notifierbackground_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messagehistoryiconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\toolbmps\messageattachmenticonimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\outlinetooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\splashscreen.bmp to %ProgramFiles%\microsoft office\office14\splashscreen_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupicons.jpg to %ProgramFiles%\microsoft office\office14\groove\toolbmps\spacebackupicons_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\formsviewattachmenticons_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseicon_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseiconmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\briefcaseiconmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleicons_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\circleiconsmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\meetingicon_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusicons_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusiconsmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusiconsmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskicon_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttoolseticonimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\splashimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whiteboxmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\whiteboxmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomicons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\zoomicons_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimages_su57ormxs32h.jpg
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\signhere.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\signhere_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\dynamic.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\dynamic_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\defaultid.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\defaultid_su57ormxs32h.pdf
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\adobeid.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\adobeid_su57ormxs32h.pdf
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\infopathwelcomeimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\infopathwelcomeimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\viewheaderpreview_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsviewattachmenticons_su57ormxs32h.jpg
from %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_150.png to %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_150_su57ormxs32h.png
from %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_70.png to %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_70_su57ormxs32h.png
from %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_150.png to %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_150_su57ormxs32h.png
from %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf to %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula_su57ormxs32h.rtf
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\iconimagesmask_su57ormxs32h.bmp
from %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_70.png to %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_70_su57ormxs32h.png
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formtoolimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrowmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagesmall.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\commsoutgoingimagesmall_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\messageboxiconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadicon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadicon_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericon.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericon_su57ormxs32h.jpg
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\cert9.db to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\cert9_su57ormxs32h.db
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericonmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\computericonmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wssfilestoolhomepagebackground.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wssfilestoolhomepagebackground_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\activetabimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\bodypanebackground.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\bodypanebackground_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimage.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimage_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimagesmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimagesmask_su57ormxs32h.bmp
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180_su57ormxs32h.png
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrow_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formtoolimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\addtoviewarrowmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\addtoviewarrow_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\viewheaderpreview_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formtoolimages.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formtoolimages_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsviewattachmenticons_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrowmask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrowmask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticons.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsviewattachmenticons_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrow.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\addtoviewarrow_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimagemask.bmp to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimagemask_su57ormxs32h.bmp
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\sectionheading.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\sectionheading_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\embeddedview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\embeddedview_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\digitalink.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\digitalink_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\attachments.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\attachments_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewheaderpreview.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewheaderpreview_su57ormxs32h.jpg
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\unformattednumeric.jpg to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\unformattednumeric_su57ormxs32h.jpg
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\key4.db to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\key4_su57ormxs32h.db

Modifies the following files

%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\pixel\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\papyrus\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\network\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\level\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\layers\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\journal\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\iris\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\indust\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\ice\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\expeditn\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\edge\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\eclipse\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\echo\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\deepblue\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\concrete\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\compass\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\cascade\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\capsules\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\canyon\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\breeze\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\boldstri\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\blends\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\axis\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\arctic\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\profile\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\quad\thmbnail.png

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'<SYSTEM32>\cmd.exe' /C %TEMP%\mssps.2aa' (with hidden window)
'<SYSTEM32>\cmd.exe' /C %TEMP%\mssps.1aa' (with hidden window)
'<SYSTEM32>\cmd.exe' /C "<SYSTEM32>\ds.bat"' (with hidden window)

Executes the following

'%ProgramFiles%\microsoft office\office14\excel.exe'
'<SYSTEM32>\cmd.exe' /C %TEMP%\mssps.2aa
'<SYSTEM32>\cmd.exe' /C %TEMP%\mssps.1aa
'<SYSTEM32>\cmd.exe' /C "<SYSTEM32>\ds.bat"
'<SYSTEM32>\cmd.exe' /C net view
'<SYSTEM32>\net.exe' view

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial