Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MedFORCE - External Link Tool' = '"%ProgramFiles(x86)%\MedFORCE\Medforce Scan\mfsmonitor.exe"'
- [<HKCU>\Software\Classes\MedFORCE\shell\open\command] '' = '"%ProgramFiles(x86)%\MedFORCE\Medforce Scan\mfsmonitor.exe" "%1"'
- [<HKLM>\System\CurrentControlSet\Control\Print\Monitors\MedFORCE Monitor M] 'Driver' = 'BuMMonNT.dll'
- [<HKLM>\Software\Classes\mfsfile\shell\open\command] '' = '"%ProgramFiles(x86)%\MedForce\MedForce Scan\mfcheckprog.exe" "%1"'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{864EE2DE-BC86-4F70-8C19-0B1A3C46E405}] 'StubPath' = 'reg add "HKCU\Software\Microsoft\Terminal Server Client\Default\AddIns\ThinPri...
- '%WINDIR%\syswow64\taskkill.exe' /T /F /im mfsmonitor.exe
- %TEMP%\7zs444f321f\thinprint\thinprint32bit.msi
- %TEMP%\ixp000.tmp\x64_nt_bumdrvnt.dll
- %TEMP%\ixp000.tmp\x64_nt_buminint.ini
- %TEMP%\ixp000.tmp\x64_nt_bummonnt.dll
- %TEMP%\ixp000.tmp\x64_nt_bumpront.dll
- %TEMP%\ixp000.tmp\x64_nt_bumresnt.dll
- %TEMP%\ixp000.tmp\x64_nt_bumrmvnt.dll
- %TEMP%\ixp000.tmp\x64_nt_bumuifnt.dll
- %TEMP%\ixp000.tmp\x64_nt_jpeg32.dll
- %TEMP%\ixp000.tmp\x64_nt_tiff32.dll
- %TEMP%\ixp000.tmp\x64_ts_biimguser.dll
- %TEMP%\ixp000.tmp\x64_nt_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x64_nt_bumappnt.exe
- %TEMP%\ixp000.tmp\x64_ts_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x64_ts_buminits.ini
- %TEMP%\ixp000.tmp\x64_ts_bummonts.dll
- %TEMP%\ixp000.tmp\x64_ts_bumprots.dll
- %TEMP%\ixp000.tmp\x64_ts_bumrests.dll
- %TEMP%\ixp000.tmp\x64_ts_bumrmvts.dll
- %TEMP%\ixp000.tmp\x64_ts_bumuifts.dll
- %TEMP%\ixp000.tmp\x64_ts_jpeg32.dll
- %TEMP%\ixp000.tmp\x64_ts_tiff32.dll
- %TEMP%\ixp000.tmp\x86_nt_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x86_nt_bumappnt.exe
- %TEMP%\ixp000.tmp\x64_ts_bumappts.exe
- %TEMP%\ixp000.tmp\x64_ts_bumdrvts.dll
- %TEMP%\ixp000.tmp\x64_nt_biimguser.dll
- %TEMP%\ixp000.tmp\uninstall_tgsdkx.bat
- %TEMP%\ixp000.tmp\tgsdkx.dll
- %WINDIR%\iltwain.ini
- %TEMP%\kbherror.log
- %TEMP%\ixp000.tmp\mfspdi.exe
- %TEMP%\ixp000.tmp\del64.exe
- %TEMP%\ixp000.tmp\del.bat
- %TEMP%\ixp000.tmp\install.x64.nt.dll
- %TEMP%\ixp000.tmp\install.x64.ts.dll
- %TEMP%\ixp000.tmp\install.x86.nt.dll
- %TEMP%\ixp000.tmp\install.x86.ts.dll
- %TEMP%\ixp000.tmp\uninstall.exe
- %TEMP%\ixp000.tmp\crde2003.dll
- C:\thinprint\thinprint64bit.msi
- %TEMP%\ixp000.tmp\install_tgsdkx.bat
- %TEMP%\ixp000.tmp\linkconfig.html
- %TEMP%\ixp000.tmp\mf_wts1_client.reg
- %TEMP%\ixp000.tmp\mf_wts1_server.reg
- %TEMP%\ixp000.tmp\mfcheckprog.exe
- %TEMP%\ixp000.tmp\mflinktoolrdp64.dll
- %TEMP%\ixp000.tmp\mflinktoolrdp.dll
- %TEMP%\ixp000.tmp\mfsmonitor.exe
- %TEMP%\ixp000.tmp\midas.dll
- %TEMP%\ixp000.tmp\tgsdk64.dll
- %TEMP%\ixp000.tmp\tgsdk.dll
- %TEMP%\ixp000.tmp\tgsdkpw64.bin
- %TEMP%\ixp000.tmp\isp2003.dll
- %TEMP%\ixp000.tmp\x86_nt_bumdrvnt.dll
- %TEMP%\ixp000.tmp\x86_nt_bummonnt.dll
- %WINDIR%\installer\{864ee2de-bc86-4f70-8c19-0b1a3c46e405}\newshortcut1_b1b56f529bbe461291a76455e4016eb5.exe
- %TEMP%\ixp000.tmp\x86_nt_bumpront.dll
- <SYSTEM32>\jpeg32.dll
- <SYSTEM32>\tiff32.dll
- <SYSTEM32>\biimguser.dll
- <SYSTEM32>\bumresnt.dll
- <SYSTEM32>\bumappnt.exe
- <SYSTEM32>\bummonnt.dll
- <SYSTEM32>\spool\prtprocs\x64\bumpront.dll
- %ProgramFiles(x86)%\medforce\medforce scan\mf_wts1_client.reg
- %ProgramFiles(x86)%\medforce\medforce scan\mf_wts1_server.reg
- <SYSTEM32>\spool\drivers\x64\3\new\tiff32.dll
- <SYSTEM32>\spool\drivers\x64\bumdrvnt.dll
- <SYSTEM32>\spool\drivers\x64\3\bumdrvnt.dll
- %WINDIR%\bimonitor.ini
- %ProgramFiles%\installshield installation information\medforce tiff driver\del.bat
- %ProgramFiles%\installshield installation information\medforce tiff driver\del64.exe
- %ProgramFiles%\installshield installation information\medforce tiff driver\bumrmvnt.dll
- <SYSTEM32>\tpclnrdp.dll
- <SYSTEM32>\tpclnt.dll
- <SYSTEM32>\tpclntdeu.dll
- <SYSTEM32>\tpview.dll
- <SYSTEM32>\tpviewdeu.dll
- %ProgramFiles%\thinprint client\license.rtf
- %WINDIR%\installer\{864ee2de-bc86-4f70-8c19-0b1a3c46e405}\arpproducticon.exe
- %ProgramFiles%\installshield installation information\medforce tiff driver\uninstall.exe
- %ProgramFiles%\installshield installation information\medforce tiff driver\install.x64.nt.dll
- <SYSTEM32>\spool\drivers\x64\3\buminint.ini
- <SYSTEM32>\spool\drivers\x64\buminint.ini
- <SYSTEM32>\spool\drivers\x64\3\bumresnt.dll
- %TEMP%\ixp000.tmp\x86_nt_bumrmvnt.dll
- %TEMP%\ixp000.tmp\x86_nt_bumuifnt.dll
- %TEMP%\ixp000.tmp\x86_nt_jpeg32.dll
- %TEMP%\ixp000.tmp\x86_nt_tiff32.dll
- %TEMP%\ixp000.tmp\x86_nt_biimguser.dll
- %TEMP%\ixp000.tmp\x86_ts_biimguser.dll
- %TEMP%\ixp000.tmp\x86_ts_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x86_ts_bumappts.exe
- %TEMP%\ixp000.tmp\x86_ts_bumdrvts.dll
- %TEMP%\ixp000.tmp\x86_ts_buminits.ini
- %TEMP%\ixp000.tmp\x86_ts_bummonts.dll
- %TEMP%\ixp000.tmp\x86_nt_bumresnt.dll
- %TEMP%\ixp000.tmp\x86_ts_bumprots.dll
- %TEMP%\ixp000.tmp\x86_ts_bumrmvts.dll
- %TEMP%\ixp000.tmp\x86_ts_bumuifts.dll
- %TEMP%\ixp000.tmp\x86_ts_jpeg32.dll
- %TEMP%\ixp000.tmp\x86_ts_tiff32.dll
- <SYSTEM32>\spool\drivers\x64\tiff32.dll
- <SYSTEM32>\spool\drivers\x64\biimguser.dll
- <SYSTEM32>\spool\drivers\x64\jpeg32.dll
- <SYSTEM32>\spool\drivers\x64\3\jpeg32.dll
- <SYSTEM32>\spool\drivers\x64\bumuifnt.dll
- <SYSTEM32>\spool\drivers\x64\3\bumuifnt.dll
- <SYSTEM32>\spool\drivers\x64\bumresnt.dll
- %TEMP%\ixp000.tmp\x86_ts_bumrests.dll
- C:\thinprint\thinprint32bit.msi
- %TEMP%\ixp000.tmp\x86_nt_buminint.ini
- %HOMEPATH%\desktop\shortcut to mfrss.lnk
- D:\16687d111455ce627b73a854d83bd2\displayicon.ico
- %ProgramFiles(x86)%\medforce\remote scan\mfscanopt.ini
- %HOMEPATH%\desktop\medforce login.rdp
- %WINDIR%\nedprint.ini
- %ProgramFiles(x86)%\medforce\medforce scan\crde2003.dll
- %ProgramFiles(x86)%\medforce\medforce scan\install_tgsdkx.bat
- %ProgramFiles(x86)%\medforce\medforce scan\isp2003.dll
- %ProgramFiles(x86)%\medforce\medforce scan\linkconfig.html
- %ProgramFiles(x86)%\medforce\medforce scan\mfcheckprog.exe
- %ProgramFiles(x86)%\medforce\medforce scan\mflinktoolrdp.dll
- %ProgramFiles(x86)%\medforce\medforce scan\mflinktoolrdp64.dll
- %ProgramFiles(x86)%\medforce\remote scan\mfremotescansoapclient.exe
- %ProgramFiles(x86)%\medforce\remote scan\mfremotescansoapclient.ini
- %ProgramFiles(x86)%\medforce\medforce scan\mfsmonitor.exe
- %ProgramFiles(x86)%\medforce\medforce scan\tgsdk64.dll
- %ProgramFiles(x86)%\medforce\medforce scan\tgsdkx.dll
- %ProgramFiles(x86)%\medforce\medforce scan\uninstall_tgsdkx.bat
- D:\16687d111455ce627b73a854d83bd2\dhtmlheader.html
- D:\16687d111455ce627b73a854d83bd2\setup.exe
- D:\16687d111455ce627b73a854d83bd2\setupengine.dll
- D:\16687d111455ce627b73a854d83bd2\setupui.dll
- D:\16687d111455ce627b73a854d83bd2\setupui.xsd
- D:\16687d111455ce627b73a854d83bd2\sqmapi.dll
- D:\16687d111455ce627b73a854d83bd2\watermark.bmp
- %ProgramFiles(x86)%\medforce\medforce scan\midas.dll
- %ProgramFiles(x86)%\medforce\medforce scan\tgsdk.dll
- %ProgramFiles(x86)%\medforce\remote scan\isp2003.dll
- %ProgramFiles(x86)%\medforce\remote scan\crde2003.dll
- %TEMP%\7zs444f321f\elt\tgsdkx.dll
- %TEMP%\7zs444f321f\elt\install_tgsdkx.bat
- %TEMP%\7zs444f321f\elt\uninstall_tgsdkx.bat
- %TEMP%\7zs444f321f\elt\linkconfig.html
- %TEMP%\7zs444f321f\mf_elt_rdp.reg
- %TEMP%\7zs444f321f\remote scan\mfremotescansoapclient.ini
- %TEMP%\7zs444f321f\remote scan\mfscanopt.ini
- %TEMP%\7zs444f321f\pdfcreator\nedprint.ini
- %TEMP%\7zs444f321f\rdp\medforce login.rdp
- %TEMP%\7zs444f321f\medforceonline2.exe
- %TEMP%\7zs444f321f\medforce_online_setup.exe
- %TEMP%\7zs444f321f\elt\mfcheckprog.exe
- %TEMP%\7zs444f321f\thinprint\thinprint64bit.msi
- %TEMP%\7zs444f321f\remote scan\mfremotescansoapclient.exe
- %TEMP%\7zs444f321f\printerdriverr.exe
- %TEMP%\7zs444f321f\vcredist_x64.exe
- %TEMP%\7zs444f321f\elt\crde2003.dll
- %TEMP%\7zs444f321f\remote scan\crde2003.dll
- %TEMP%\7zs444f321f\elt\isp2003.dll
- %TEMP%\7zs444f321f\remote scan\isp2003.dll
- %TEMP%\7zs444f321f\elt\mflinktoolrdp.dll
- %TEMP%\7zs444f321f\elt\mflinktoolrdp64.dll
- %TEMP%\7zs444f321f\elt\midas.dll
- %TEMP%\7zs444f321f\elt\tgsdk.dll
- %TEMP%\7zs444f321f\elt\tgsdk64.dll
- %TEMP%\7zs444f321f\elt\mfsmonitor.exe
- D:\16687d111455ce627b73a854d83bd2\header.bmp
- D:\16687d111455ce627b73a854d83bd2\uiinfo.xml
- %TEMP%\hfi3ca6.tmp.html
- D:\16687d111455ce627b73a854d83bd2\strings.xml
- D:\16687d111455ce627b73a854d83bd2\1049\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1049\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\graphics\print.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate1.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate2.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate3.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate4.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate5.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate6.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate7.ico
- D:\16687d111455ce627b73a854d83bd2\3082\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1049\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate8.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\sysreqmet.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\sysreqnotmet.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\stop.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\warn.ico
- D:\16687d111455ce627b73a854d83bd2\vc_red.cab
- D:\16687d111455ce627b73a854d83bd2\vc_red.msi
- D:\16687d111455ce627b73a854d83bd2\$shtdwn$.req
- %TEMP%\hfi3a04.tmp.html
- %TEMP%\setup_20230227_141707234.html
- %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230227_141707734.html
- D:\16687d111455ce627b73a854d83bd2\graphics\save.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\setup.ico
- D:\16687d111455ce627b73a854d83bd2\3082\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\3082\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1031\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\parameterinfo.xml
- D:\16687d111455ce627b73a854d83bd2\1033\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1033\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1033\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1041\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1041\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1041\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1042\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1042\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1042\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1028\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\splashscreen.bmp
- D:\16687d111455ce627b73a854d83bd2\1028\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\2052\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\2052\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\2052\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1040\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1040\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1040\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1036\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1036\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1036\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1031\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1031\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1028\eula.rtf
- %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230227_141707734-msi_vc_red.msi.txt
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\.print client windows\configure.lnk
- %TEMP%\hfi3ca6.tmp.html
- %TEMP%\ixp000.tmp\x64_ts_biimguser.dll
- %TEMP%\ixp000.tmp\x64_ts_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x64_ts_bumappts.exe
- %TEMP%\ixp000.tmp\x64_ts_bumdrvts.dll
- %TEMP%\ixp000.tmp\x64_ts_buminits.ini
- %TEMP%\ixp000.tmp\x64_ts_bummonts.dll
- %TEMP%\ixp000.tmp\x64_ts_bumprots.dll
- %TEMP%\ixp000.tmp\x64_ts_bumrests.dll
- %TEMP%\ixp000.tmp\x64_ts_bumrmvts.dll
- %TEMP%\ixp000.tmp\x64_ts_bumuifts.dll
- %TEMP%\ixp000.tmp\x64_ts_jpeg32.dll
- %TEMP%\ixp000.tmp\x64_ts_tiff32.dll
- %TEMP%\ixp000.tmp\x86_nt_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x86_nt_bumappnt.exe
- %TEMP%\ixp000.tmp\x86_nt_buminint.ini
- %TEMP%\ixp000.tmp\x64_nt_jpeg32.dll
- %TEMP%\ixp000.tmp\x86_nt_bummonnt.dll
- %TEMP%\ixp000.tmp\x86_nt_bumpront.dll
- %TEMP%\ixp000.tmp\x86_nt_bumresnt.dll
- %TEMP%\ixp000.tmp\x86_nt_bumrmvnt.dll
- %TEMP%\ixp000.tmp\x86_nt_bumuifnt.dll
- %TEMP%\ixp000.tmp\x86_nt_jpeg32.dll
- %TEMP%\ixp000.tmp\x86_nt_tiff32.dll
- %TEMP%\ixp000.tmp\x86_nt_biimguser.dll
- %TEMP%\ixp000.tmp\x86_ts_biimguser.dll
- %TEMP%\ixp000.tmp\x86_ts_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x86_ts_bumappts.exe
- %TEMP%\ixp000.tmp\x86_ts_bumdrvts.dll
- %TEMP%\ixp000.tmp\x86_ts_buminits.ini
- %TEMP%\ixp000.tmp\x86_nt_bumdrvnt.dll
- D:\16687d111455ce627b73a854d83bd2\1033\setupresources.dll
- %TEMP%\ixp000.tmp\x64_nt_bumuifnt.dll
- %TEMP%\ixp000.tmp\del.bat
- %TEMP%\ixp000.tmp\install.x64.nt.dll
- %TEMP%\ixp000.tmp\install.x64.ts.dll
- %TEMP%\ixp000.tmp\install.x86.nt.dll
- %TEMP%\ixp000.tmp\install.x86.ts.dll
- %TEMP%\ixp000.tmp\uninstall.exe
- %TEMP%\ixp000.tmp\crde2003.dll
- %TEMP%\ixp000.tmp\install_tgsdkx.bat
- %TEMP%\ixp000.tmp\isp2003.dll
- %TEMP%\ixp000.tmp\linkconfig.html
- %TEMP%\ixp000.tmp\mf_wts1_client.reg
- %TEMP%\ixp000.tmp\mf_wts1_server.reg
- %TEMP%\ixp000.tmp\mfcheckprog.exe
- %TEMP%\ixp000.tmp\mflinktoolrdp64.dll
- %TEMP%\ixp000.tmp\x86_ts_bummonts.dll
- %TEMP%\ixp000.tmp\x64_nt_tiff32.dll
- %TEMP%\ixp000.tmp\midas.dll
- %TEMP%\ixp000.tmp\tgsdk64.dll
- %TEMP%\ixp000.tmp\tgsdk.dll
- %TEMP%\ixp000.tmp\tgsdkpw64.bin
- %TEMP%\ixp000.tmp\tgsdkx.dll
- %TEMP%\ixp000.tmp\uninstall_tgsdkx.bat
- %TEMP%\ixp000.tmp\x64_nt_biimguser.dll
- %TEMP%\ixp000.tmp\x64_nt_blackicedevmode.dll
- %TEMP%\ixp000.tmp\x64_nt_bumappnt.exe
- %TEMP%\ixp000.tmp\x64_nt_bumdrvnt.dll
- %TEMP%\ixp000.tmp\x64_nt_buminint.ini
- %TEMP%\ixp000.tmp\x64_nt_bummonnt.dll
- %TEMP%\ixp000.tmp\x64_nt_bumpront.dll
- %TEMP%\ixp000.tmp\x64_nt_bumresnt.dll
- %TEMP%\ixp000.tmp\mfsmonitor.exe
- %TEMP%\ixp000.tmp\x64_nt_bumrmvnt.dll
- %TEMP%\ixp000.tmp\x86_ts_bumprots.dll
- %TEMP%\ixp000.tmp\x86_ts_bumrests.dll
- %TEMP%\ixp000.tmp\x86_ts_bumrmvts.dll
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate4.ico
- D:\16687d111455ce627b73a854d83bd2\1036\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1031\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1031\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1031\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\3082\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\3082\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\3082\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1049\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1049\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1049\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\graphics\print.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate1.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate2.ico
- %TEMP%\ixp000.tmp\del64.exe
- D:\16687d111455ce627b73a854d83bd2\1036\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate5.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate6.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate7.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate8.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\save.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\setup.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\sysreqmet.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\sysreqnotmet.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\stop.ico
- D:\16687d111455ce627b73a854d83bd2\graphics\warn.ico
- D:\16687d111455ce627b73a854d83bd2\parameterinfo.xml
- D:\16687d111455ce627b73a854d83bd2\uiinfo.xml
- D:\16687d111455ce627b73a854d83bd2\vc_red.cab
- D:\16687d111455ce627b73a854d83bd2\vc_red.msi
- D:\16687d111455ce627b73a854d83bd2\graphics\rotate3.ico
- %TEMP%\ixp000.tmp\mflinktoolrdp.dll
- D:\16687d111455ce627b73a854d83bd2\1040\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\2052\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1040\localizeddata.xml
- %TEMP%\ixp000.tmp\x86_ts_bumuifts.dll
- %TEMP%\ixp000.tmp\x86_ts_jpeg32.dll
- %TEMP%\ixp000.tmp\x86_ts_tiff32.dll
- %WINDIR%\bimonitor.ini
- D:\16687d111455ce627b73a854d83bd2\dhtmlheader.html
- D:\16687d111455ce627b73a854d83bd2\setup.exe
- D:\16687d111455ce627b73a854d83bd2\setupengine.dll
- D:\16687d111455ce627b73a854d83bd2\setupui.dll
- D:\16687d111455ce627b73a854d83bd2\setupui.xsd
- D:\16687d111455ce627b73a854d83bd2\sqmapi.dll
- D:\16687d111455ce627b73a854d83bd2\watermark.bmp
- D:\16687d111455ce627b73a854d83bd2\header.bmp
- D:\16687d111455ce627b73a854d83bd2\displayicon.ico
- D:\16687d111455ce627b73a854d83bd2\1040\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\strings.xml
- D:\16687d111455ce627b73a854d83bd2\1036\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1033\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1033\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1041\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1041\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1041\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1042\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1042\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1042\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\1028\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\1028\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\1028\eula.rtf
- D:\16687d111455ce627b73a854d83bd2\2052\setupresources.dll
- D:\16687d111455ce627b73a854d83bd2\2052\localizeddata.xml
- D:\16687d111455ce627b73a854d83bd2\splashscreen.bmp
- %TEMP%\ixp000.tmp\mfspdi.exe
- from %TEMP%\hfi3a04.tmp.html to %TEMP%\setup_20230227_141707234.html
- from %TEMP%\setup_20230227_141707234.html to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230227_141707734.html
- from <SYSTEM32>\spool\drivers\x64\3\new\tiff32.dll to <SYSTEM32>\spool\drivers\x64\3\tiff32.dll
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat.log1
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat
- 'microsoft.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK microsoft.com
- ClassName: '' WindowName: ''
- ClassName: 'TApplication' WindowName: 'MedFORCE - External Link Tool'
- ClassName: 'TApplication' WindowName: 'MedFORCE Scan - External Link Tool'
- ClassName: 'TApplication' WindowName: 'M Technologies - External Link Tool'
- ClassName: 'MS_WINHELP' WindowName: ''
- '%TEMP%\7zs444f321f\medforce_online_setup.exe'
- '%TEMP%\7zs444f321f\medforceonline2.exe'
- '%TEMP%\7zs444f321f\vcredist_x64.exe' /q /norestart
- 'D:\16687d111455ce627b73a854d83bd2\setup.exe' /q /norestart
- '%ProgramFiles(x86)%\medforce\medforce scan\mfsmonitor.exe'
- '%TEMP%\7zs444f321f\printerdriverr.exe'
- '%TEMP%\ixp000.tmp\mfspdi.exe' INSTALL=Y TERMINAL_CLIENT=Y
- '%WINDIR%\syswow64\cmd.exe' /c Medforce_Online_Setup.exe & pause
- '%WINDIR%\syswow64\reg.exe' import "%TEMP%\7zS444F321F\MF_ELT_RDP.reg"
- '%WINDIR%\syswow64\msiexec.exe' /i c:\ThinPrint\ThinPrint64bit.msi /qn